@farming-labs/docs 0.2.104 → 0.2.106

package/dist/{markdown-sections-7OoA7ylx.mjs → markdown-sections-BKy4labo.mjs}

@@ -3,6 +3,61 @@ import { slug } from "github-slugger";
 import { parseEntities } from "parse-entities";
 import remarkGfm from "remark-gfm";
 
+//#region src/access.ts
+function isRecord$1(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeStrings(value) {
+	if (!Array.isArray(value)) return void 0;
+	const strings = Array.from(new Set(value.flatMap((item) => typeof item === "string" && item.trim() ? [item.trim()] : [])));
+	return strings.length > 0 ? strings : void 0;
+}
+function normalizeClaimValue(value) {
+	if (typeof value === "string") return value.trim() || void 0;
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value === "boolean") return value;
+	return normalizeStrings(value);
+}
+function normalizeDocsPageAccessPolicy(value) {
+	if (!isRecord$1(value)) return void 0;
+	const visibility = value.visibility === "public" || value.visibility === "authenticated" ? value.visibility : void 0;
+	const scopes = normalizeStrings(value.scopes);
+	const rawClaims = isRecord$1(value.claims) ? value.claims : void 0;
+	const claims = rawClaims ? Object.fromEntries(Object.entries(rawClaims).flatMap(([name, rawValue]) => {
+		const normalizedName = name.trim();
+		const normalizedValue = normalizeClaimValue(rawValue);
+		return normalizedName && normalizedValue !== void 0 ? [[normalizedName, normalizedValue]] : [];
+	})) : void 0;
+	const normalizedClaims = claims && Object.keys(claims).length > 0 ? claims : void 0;
+	if (!visibility && !scopes && !normalizedClaims) return void 0;
+	return {
+		...visibility ? { visibility } : {},
+		...scopes ? { scopes } : {},
+		...normalizedClaims ? { claims: normalizedClaims } : {}
+	};
+}
+function claimMatches(expected, actual) {
+	const expectedValues = Array.isArray(expected) ? expected : [expected];
+	const actualValues = Array.isArray(actual) ? actual : [actual];
+	return expectedValues.some((expectedValue) => actualValues.some((actualValue) => actualValue === expectedValue));
+}
+function isDocsPageAccessAllowed(policy, principal) {
+	if (!policy) return true;
+	if (!(policy.visibility !== "public" || Boolean(policy.scopes?.length) || Boolean(policy.claims && Object.keys(policy.claims).length > 0))) return true;
+	if (!principal) return false;
+	const scopes = new Set(principal.scopes ?? []);
+	if (policy.scopes?.some((scope) => !scopes.has(scope))) return false;
+	for (const [name, expected] of Object.entries(policy.claims ?? {})) if (!claimMatches(expected, principal.claims?.[name])) return false;
+	return true;
+}
+function isDocsAgentPageAccessible(page, principal) {
+	return isDocsPageAccessAllowed(page.agent?.access, principal);
+}
+function filterDocsPagesByAccess(pages, principal) {
+	return pages.filter((page) => isDocsAgentPageAccessible(page, principal));
+}
+
+//#endregion
 //#region src/agent-contract.ts
 const PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS = [
 	"task",
@@ -16,9 +71,14 @@ const PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS = [
 	"rollback",
 	"failureModes"
 ];
-const PAGE_AGENT_CONTRACT_FIELDS = ["tokenBudget", ...PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS];
+const PAGE_AGENT_CONTRACT_FIELDS = [
+	"tokenBudget",
+	"access",
+	...PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS
+];
 const PAGE_AGENT_CONTRACT_FIELD_SCHEMA = {
 	tokenBudget: "number",
+	access: "{visibility?,scopes?,claims?}",
 	task: "string",
 	outcome: "string",
 	appliesTo: {
@@ -50,6 +110,11 @@ const VERIFICATION_FIELDS = [
 	"expect"
 ];
 const FAILURE_MODE_FIELDS = ["symptom", "resolution"];
+const ACCESS_FIELDS = [
+	"visibility",
+	"scopes",
+	"claims"
+];
 const PAGE_AGENT_CONTRACT_START_MARKER = "<!-- farming-labs:agent-contract:start -->";
 const PAGE_AGENT_CONTRACT_END_MARKER = "<!-- farming-labs:agent-contract:end -->";
 function isRecord(value) {
@@ -163,6 +228,7 @@ function normalizeTokenBudget(value) {
 function normalizePageAgentFrontmatter(value) {
 	if (!isRecord(value)) return void 0;
 	const tokenBudget = normalizeTokenBudget(value.tokenBudget);
+	const access = "access" in value ? normalizeDocsPageAccessPolicy(value.access) ?? { visibility: "authenticated" } : void 0;
 	const task = normalizeString(value.task);
 	const outcome = normalizeString(value.outcome);
 	const appliesTo = normalizeAppliesTo(value.appliesTo);
@@ -175,6 +241,7 @@ function normalizePageAgentFrontmatter(value) {
 	const failureModes = normalizeFailureModes(value.failureModes);
 	const normalized = {
 		...tokenBudget !== void 0 ? { tokenBudget } : {},
+		...access ? { access } : {},
 		...task ? { task } : {},
 		...outcome ? { outcome } : {},
 		...appliesTo ? { appliesTo } : {},
@@ -258,6 +325,35 @@ function getPageAgentFrontmatterIssues(value) {
 		path: "agent.tokenBudget",
 		message: "must be a positive finite number"
 	});
+	if ("access" in value) if (!isRecord(value.access)) issues.push({
+		path: "agent.access",
+		message: "must be an object"
+	});
+	else {
+		addUnknownKeyIssues(issues, value.access, ACCESS_FIELDS, "agent.access");
+		if ("visibility" in value.access && value.access.visibility !== "public" && value.access.visibility !== "authenticated") issues.push({
+			path: "agent.access.visibility",
+			message: "must be \"public\" or \"authenticated\""
+		});
+		if ("scopes" in value.access && !normalizeStringList(value.access.scopes)) issues.push({
+			path: "agent.access.scopes",
+			message: "must be a non-empty string array"
+		});
+		if ("claims" in value.access) {
+			if (!isRecord(value.access.claims) || Object.keys(value.access.claims).length === 0) issues.push({
+				path: "agent.access.claims",
+				message: "must be a non-empty object"
+			});
+			else for (const [name, claim] of Object.entries(value.access.claims)) if (!name.trim() || normalizeDocsPageAccessPolicy({ claims: { [name]: claim } }) === void 0) issues.push({
+				path: `agent.access.claims.${name || "<empty>"}`,
+				message: "must be a string, number, boolean, or non-empty string array"
+			});
+		}
+		if (!normalizeDocsPageAccessPolicy(value.access)) issues.push({
+			path: "agent.access",
+			message: "must include a valid visibility, scope, or claim"
+		});
+	}
 	addStringIssue(issues, value, "task");
 	addStringIssue(issues, value, "outcome");
 	if ("appliesTo" in value) if (!isRecord(value.appliesTo)) issues.push({
@@ -415,6 +511,18 @@ function renderPageAgentFrontmatterYamlLines(value, indentation = 0) {
 	const child = `${indent}  `;
 	const lines = [`${indent}agent:`];
 	if (agent.tokenBudget !== void 0) lines.push(`${child}tokenBudget: ${agent.tokenBudget}`);
+	if (agent.access) {
+		lines.push(`${child}access:`);
+		const accessIndent = `${child}  `;
+		if (agent.access.visibility) lines.push(`${accessIndent}visibility: ${agent.access.visibility}`);
+		if (agent.access.scopes) renderYamlStringList(lines, accessIndent, "scopes", [...agent.access.scopes]);
+		if (agent.access.claims) {
+			lines.push(`${accessIndent}claims:`);
+			const claimsIndent = `${accessIndent}  `;
+			for (const [name, claim] of Object.entries(agent.access.claims).sort(([left], [right]) => left.localeCompare(right))) if (Array.isArray(claim)) renderYamlStringList(lines, claimsIndent, yamlString(name), [...claim]);
+			else lines.push(`${claimsIndent}${yamlString(name)}: ${typeof claim === "string" ? yamlString(claim) : claim}`);
+		}
+	}
 	if (agent.task) lines.push(`${child}task: ${yamlString(agent.task)}`);
 	if (agent.outcome) lines.push(`${child}outcome: ${yamlString(agent.outcome)}`);
 	if (agent.appliesTo) {
@@ -1489,4 +1597,4 @@ function findDocsMarkdownSection(markdown, requestedSection) {
 }
 
 //#endregion
-export { upsertPageAgentContractMarkdown as S, hasStructuredPageAgentContract as _, findDocsGeneratedAgentContractRanges as a, renderPageAgentFrontmatterYamlLines as b, slugifyDocsMarkdownHeading as c, PAGE_AGENT_CONTRACT_END_MARKER as d, PAGE_AGENT_CONTRACT_FIELDS as f, getPageAgentFrontmatterIssues as g, PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS as h, createDocsRenderedHeadingAnchorResolver as i, stripDocsGeneratedAgentContractMarkers as l, PAGE_AGENT_CONTRACT_START_MARKER as m, cleanDocsRenderedHeadingLabel as n, findDocsMarkdownSection as o, PAGE_AGENT_CONTRACT_FIELD_SCHEMA as p, createDocsMarkdownHeadingAnchorResolver as r, parseDocsMarkdownSections as s, applyDocsMarkdownHeadingAnchors as t, withDocsMarkdownRenderableHeadings as u, normalizePageAgentFrontmatter as v, stripGeneratedPageAgentContractMarkdown as x, renderPageAgentContractMarkdown as y };
+export { filterDocsPagesByAccess as C, normalizeDocsPageAccessPolicy as E, upsertPageAgentContractMarkdown as S, isDocsPageAccessAllowed as T, hasStructuredPageAgentContract as _, findDocsGeneratedAgentContractRanges as a, renderPageAgentFrontmatterYamlLines as b, slugifyDocsMarkdownHeading as c, PAGE_AGENT_CONTRACT_END_MARKER as d, PAGE_AGENT_CONTRACT_FIELDS as f, getPageAgentFrontmatterIssues as g, PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS as h, createDocsRenderedHeadingAnchorResolver as i, stripDocsGeneratedAgentContractMarkers as l, PAGE_AGENT_CONTRACT_START_MARKER as m, cleanDocsRenderedHeadingLabel as n, findDocsMarkdownSection as o, PAGE_AGENT_CONTRACT_FIELD_SCHEMA as p, createDocsMarkdownHeadingAnchorResolver as r, parseDocsMarkdownSections as s, applyDocsMarkdownHeadingAnchors as t, withDocsMarkdownRenderableHeadings as u, normalizePageAgentFrontmatter as v, isDocsAgentPageAccessible as w, stripGeneratedPageAgentContractMarkdown as x, renderPageAgentContractMarkdown as y };

package/dist/{mcp-B6ZZdp6F.mjs → mcp-DsjWxF7g.mjs}

@@ -1,16 +1,16 @@
-import "./agent-PSrgiJD8.mjs";
-import "./markdown-sections-7OoA7ylx.mjs";
-import { L as resolveDocsPublishedAgentSkill } from "./standards-discovery-Ckx0tN7B.mjs";
-import "./openapi-mcp-B7u7Y0gB.mjs";
-import { a as resolveDocsMetadataBaseUrl } from "./metadata-D4v_R1t5.mjs";
-import "./sitemap-server-C2TauhKa.mjs";
-import { r as resolveConfiguredAgentSkills } from "./agent-skills-server-DFqQyO_V.mjs";
-import "./agent-evals-U9d_db2u.mjs";
+import "./markdown-sections-BKy4labo.mjs";
+import "./agent-DCTGj6J7.mjs";
+import { L as resolveDocsPublishedAgentSkill } from "./standards-discovery-Bpz90VYq.mjs";
+import "./openapi-mcp-DQ3xptKo.mjs";
+import { a as resolveDocsMetadataBaseUrl } from "./metadata-7htr-Xj_.mjs";
+import "./sitemap-server-NeVu8W38.mjs";
+import { r as resolveConfiguredAgentSkills } from "./agent-skills-server-Ddbf15pY.mjs";
+import "./agent-evals-D-sPJfXz.mjs";
 import { createFilesystemDocsMcpSource, resolveDocsMcpConfig, runDocsMcpStdio } from "./mcp.mjs";
-import "./authoring-mcp-BCM5CJbJ.mjs";
-import "./code-blocks-c3nIrWOM.mjs";
+import "./authoring-mcp-Be7quE5R.mjs";
+import "./code-blocks-D90CCJFs.mjs";
 import "./server.mjs";
-import { _ as resolveDocsContentDir, d as readNavTitle, g as resolveDocsConfigPath, i as hasTopLevelProperty, l as readBooleanProperty, n as extractObjectLiteral, o as loadDocsConfigModuleResult, p as readStringProperty, t as extractNestedObjectLiteral } from "./config-BhF6J2N4.mjs";
+import { _ as resolveDocsContentDir, d as readNavTitle, g as resolveDocsConfigPath, i as hasTopLevelProperty, l as readBooleanProperty, n as extractObjectLiteral, o as loadDocsConfigModuleResult, p as readStringProperty, t as extractNestedObjectLiteral } from "./config-DrZ3fXgf.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import pc from "picocolors";

package/dist/mcp.d.mts

@@ -1,6 +1,6 @@
-import { Cr as FeedbackConfig, F as DocsAgentContentChangesConfig, Qt as DocsMcpAuthenticate, Tn as DocsRetrievalSourceProvenance, Un as DocsSearchConfig, W as DocsAgentEvaluationsConfig, Xt as DocsMcpAllowedOrigins, Zt as DocsMcpAuthPrincipal, bn as DocsOpenApiMcpConfig, dr as DocsSearchSourcePage, ft as DocsAnalyticsConfig, gr as DocsTelemetryConfig, mn as DocsOkfConfig, qr as PageAgentFrontmatter, tn as DocsMcpConfig, un as DocsObservabilityConfig, vn as DocsOkfTrustMetadataInput, xr as DocsTelemetryFramework, zr as OrderingItem } from "./types-BthCiAD9.mjs";
-import { z as DocsPublishedAgentSkill } from "./standards-discovery-Cqq8QmlH.mjs";
-import { An as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, Cn as DocsContentChangeHydrationBudget, Dn as DocsContentChangeHydrationTombstone, En as DocsContentChangeHydrationSection, Fn as DocsContentChangeFeed, On as HydrateDocsContentChangesOptions, Sn as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, Tn as DocsContentChangeHydrationResponse, it as DocsMarkdownSectionIndex, jn as hydrateDocsContentChanges, kn as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, wn as DocsContentChangeHydrationContent, xn as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET } from "./agent-C9IdC__R.mjs";
+import { $t as DocsMcpAuthPrincipal, Er as FeedbackConfig, Hr as OrderingItem, K as DocsAgentEvaluationsConfig, Kn as DocsSearchConfig, L as DocsAgentContentChangesConfig, On as DocsRetrievalSourceProvenance, Qt as DocsMcpAllowedOrigins, Sn as DocsOpenApiMcpConfig, Xr as PageAgentFrontmatter, bn as DocsOkfTrustMetadataInput, en as DocsMcpAuthenticate, fn as DocsObservabilityConfig, gn as DocsOkfConfig, mr as DocsSearchSourcePage, mt as DocsAnalyticsConfig, rn as DocsMcpConfig, wr as DocsTelemetryFramework, yr as DocsTelemetryConfig } from "./types-QhYMnKvb.mjs";
+import { z as DocsPublishedAgentSkill } from "./standards-discovery-Xm84bS4M.mjs";
+import { a as DocsContentChangeHydrationResponse, c as HydrateDocsContentChangesOptions, d as hydrateDocsContentChanges, h as DocsContentChangeFeed, i as DocsContentChangeHydrationContent, l as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, n as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, o as DocsContentChangeHydrationSection, r as DocsContentChangeHydrationBudget, s as DocsContentChangeHydrationTombstone, sn as DocsMarkdownSectionIndex, t as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, u as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET } from "./content-change-hydration-CoYRs3pC.mjs";
 import { McpServer } from "@modelcontextprotocol/server";
 
 //#region src/mcp.d.ts
@@ -188,6 +188,8 @@ interface DocsMcpContextResult {
 }
 interface DocsMcpContextOptions {
   pages: readonly DocsMcpPage[];
+  /** Authenticated identity used to retain authorized pages during retrieval. */
+  principal?: DocsMcpAuthPrincipal;
   query: string;
   framework?: string;
   version?: string;

package/dist/mcp.mjs

@@ -1,9 +1,11 @@
-import { a as emitDocsAnalyticsEvent, i as emitDocsAgentTraceEvent, n as createDocsAgentTraceContext, r as createDocsAgentTraceId } from "./analytics-Bx44lg6d.mjs";
-import { $n as resolveDocsMcpProtectedResourceMetadataLocation, An as normalizeAgentLocale, Dn as agentVersionConstraintMatches, E as DOCS_MARKDOWN_SECTION_INDEX_FORMAT, Fn as paginateDocsItems, Jn as isDocsMcpProtectedResourceMetadataPath, Jt as resolveDocsContentChangesConfig, Kt as isDocsContentChangeGeneration, Ln as normalizeDocsRelated, Nn as DocsPaginationCursorError, On as agentVersionConstraintsOverlap, P as buildDocsMarkdownSectionIndex, Qn as normalizeDocsMcpEndpointPath, Rn as renderDocsRelatedMarkdownLines, Tn as resolveDocsAudienceMdxContent, Tt as validateDocsAgentFeedbackPayload, Ut as DocsContentChangesRequestError, Wt as createDocsContentChangeFeed, Xn as isDocsMcpResourcePath, Zn as normalizeDocsMcpAuthorizationServerUrls, ar as normalizeDocsOkfTrustMetadataInput, dn as performDocsSearch, er as resolveDocsMcpResourceLocation, fn as performDocsSearchWithMetadata, ir as buildDocsOkfBundle, jn as normalizeAgentScopeValues, kn as normalizeAgentFramework, lt as resolveDocsAgentFeedbackConfig, or as resolveDocsOkfConfig, qn as isDocsMcpOAuthScopeToken, tn as buildDocsSearchFacets, un as normalizeDocsSearchFilters, wt as toDocsMarkdownUrl, yn as resolveLocalDocsMcpSearchConfig } from "./agent-PSrgiJD8.mjs";
-import { S as upsertPageAgentContractMarkdown, _ as hasStructuredPageAgentContract, o as findDocsMarkdownSection, s as parseDocsMarkdownSections, v as normalizePageAgentFrontmatter, y as renderPageAgentContractMarkdown } from "./markdown-sections-7OoA7ylx.mjs";
-import { q as isDocsRetrievalCanonicalUrl } from "./standards-discovery-Ckx0tN7B.mjs";
-import { _ as emitDocsTelemetryMcpToolEvent, a as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, h as emitDocsTelemetryAgentSurfaceEvent, i as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, m as stripGeneratedAgentProvenance, n as resolveDocsOpenApiMcpOperations, o as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, r as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, s as hydrateDocsContentChanges, t as resolveDocsOpenApiMcpBaseUrl, v as emitDocsTelemetryProjectEvent } from "./openapi-mcp-B7u7Y0gB.mjs";
-import { n as resolvePageSidebarFolderIndexBehavior } from "./sidebar-IcpElOVH.mjs";
+import { C as filterDocsPagesByAccess, S as upsertPageAgentContractMarkdown, _ as hasStructuredPageAgentContract, o as findDocsMarkdownSection, s as parseDocsMarkdownSections, v as normalizePageAgentFrontmatter, y as renderPageAgentContractMarkdown } from "./markdown-sections-BKy4labo.mjs";
+import { a as emitDocsAnalyticsEvent, i as emitDocsAgentTraceEvent, n as createDocsAgentTraceContext, r as createDocsAgentTraceId } from "./analytics-CqfcIBdg.mjs";
+import { $n as normalizeDocsMcpEndpointPath, An as normalizeAgentFramework, E as DOCS_MARKDOWN_SECTION_INDEX_FORMAT, En as resolveDocsAudienceMdxContent, Et as validateDocsAgentFeedbackPayload, Gt as createDocsContentChangeFeed, In as paginateDocsItems, Jn as isDocsMcpOAuthScopeToken, Mn as normalizeAgentScopeValues, On as agentVersionConstraintMatches, P as buildDocsMarkdownSectionIndex, Pn as DocsPaginationCursorError, Qn as normalizeDocsMcpAuthorizationServerUrls, Rn as normalizeDocsRelated, Tt as toDocsMarkdownUrl, Wt as DocsContentChangesRequestError, Yn as isDocsMcpProtectedResourceMetadataPath, Yt as resolveDocsContentChangesConfig, Zn as isDocsMcpResourcePath, ar as buildDocsOkfBundle, bn as resolveLocalDocsMcpSearchConfig, dn as normalizeDocsSearchFilters, er as resolveDocsMcpProtectedResourceMetadataLocation, fn as performDocsSearch, jn as normalizeAgentLocale, kn as agentVersionConstraintsOverlap, nn as buildDocsSearchFacets, or as normalizeDocsOkfTrustMetadataInput, pn as performDocsSearchWithMetadata, qt as isDocsContentChangeGeneration, sr as resolveDocsOkfConfig, tr as resolveDocsMcpResourceLocation, ut as resolveDocsAgentFeedbackConfig, zn as renderDocsRelatedMarkdownLines } from "./agent-DCTGj6J7.mjs";
+import { r as isDocsRetrievalCanonicalUrl } from "./retrieval-digest-B-SgtXKK.mjs";
+import "./standards-discovery-Bpz90VYq.mjs";
+import { _ as emitDocsTelemetryAgentSurfaceEvent, a as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, b as emitDocsTelemetryProjectEvent, c as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, g as stripGeneratedAgentProvenance, i as resolveDocsOpenApiMcpOperations, l as hydrateDocsContentChanges, n as readDocsOpenApiMcpResponse, o as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, r as resolveDocsOpenApiMcpBaseUrl, s as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, t as acquireDocsOpenApiMcpBudget, y as emitDocsTelemetryMcpToolEvent } from "./openapi-mcp-DQ3xptKo.mjs";
+import { n as resolvePageSidebarFolderIndexBehavior } from "./sidebar-3W51s2sF.mjs";
+import { t as validateDocsOpenApiMcpUrl } from "./openapi-mcp-node-vO3IXVGI.mjs";
 import matter from "gray-matter";
 import fs from "node:fs";
 import path from "node:path";
@@ -12,6 +14,23 @@ import { InMemoryServerEventBus, McpServer, ProtocolError, ProtocolErrorCode, Re
 import * as z from "zod/v4";
 
 //#region src/mcp.ts
+function filterDocsMcpNavigation(tree, allowedUrls) {
+	const filterNodes = (nodes) => nodes.flatMap((node) => {
+		if (node.type === "page") return allowedUrls.has(node.url) ? [node] : [];
+		const children = filterNodes(node.children);
+		const index = node.index && allowedUrls.has(node.index.url) ? node.index : void 0;
+		const { index: _unfilteredIndex, ...folder } = node;
+		return children.length > 0 || index ? [{
+			...folder,
+			...index ? { index } : {},
+			children
+		}] : [];
+	});
+	return {
+		...tree,
+		children: filterNodes(tree.children)
+	};
+}
 const DEFAULT_MCP_VERSION = "0.0.0";
 const DEFAULT_MCP_NAME = "@farming-labs/docs";
 const DOCS_MCP_DISCOVERY_CACHE_TTL_MS = 300 * 1e3;
@@ -2687,6 +2706,7 @@ const openApiOperationOutputSchema = z.object({
 	status: z.number().int(),
 	ok: z.boolean(),
 	contentType: z.string().optional(),
+	responseTruncated: z.boolean().optional(),
 	body: z.unknown()
 });
 const readPagesOutputSchema = z.object({
@@ -3319,11 +3339,16 @@ async function createDocsMcpServer(options) {
 		search: options.search
 	};
 	const telemetryFramework = options.telemetryFramework ?? "mcp";
-	function getSourcePages(locale) {
-		return options.source.getPages(resolveSourceLocale(locale), options.requestContext);
+	async function getSourcePages(locale) {
+		return getResolvedSourcePages(resolveSourceLocale(locale));
 	}
-	function getSourceNavigation(locale) {
-		return options.source.getNavigation(resolveSourceLocale(locale), options.requestContext);
+	async function getResolvedSourcePages(locale) {
+		return filterDocsPagesByAccess(await options.source.getPages(locale, options.requestContext), options.requestContext?.auth);
+	}
+	async function getSourceNavigation(locale) {
+		const resolvedLocale = resolveSourceLocale(locale);
+		const [tree, pages] = await Promise.all([options.source.getNavigation(resolvedLocale, options.requestContext), getResolvedSourcePages(resolvedLocale)]);
+		return filterDocsMcpNavigation(tree, new Set(pages.map((page) => page.url)));
 	}
 	function resolveSourceLocale(locale) {
 		return options.source.resolveLocale ? options.source.resolveLocale(locale, options.requestContext) : locale;
@@ -3420,7 +3445,11 @@ async function createDocsMcpServer(options) {
 		}
 		const requestUrl = new URL(requestPath.replace(/^\/+/, ""), `${baseUrl.replace(/\/+$/u, "")}/`);
 		for (const [name, value] of query) requestUrl.searchParams.append(name, value);
-		if (requestUrl.protocol !== "https:" && requestUrl.protocol !== "http:") throw new ProtocolError(ProtocolErrorCode.InvalidParams, "OpenAPI MCP server URLs must use HTTP or HTTPS.");
+		try {
+			await validateDocsOpenApiMcpUrl(requestUrl, openapiConfig);
+		} catch (error) {
+			throw new ProtocolError(ProtocolErrorCode.InvalidParams, error instanceof Error ? error.message : "OpenAPI MCP destination was blocked.");
+		}
 		const configuredHeaders = typeof openapiConfig.headers === "function" ? await openapiConfig.headers({
 			operationId: operation.operationId,
 			method: operation.method,
@@ -3432,17 +3461,42 @@ async function createDocsMcpServer(options) {
 		if (body !== void 0) requestHeaders.set("Content-Type", "application/json");
 		const controller = new AbortController();
 		const timeout = setTimeout(() => controller.abort(), openapiConfig.timeoutMs ?? 1e4);
+		const budgetKey = `${options.requestContext?.auth?.id ?? "anonymous"}:${operation.operationId}`;
+		let releaseBudget;
 		try {
-			const response = await fetch(requestUrl, {
-				method: operation.method,
-				headers: requestHeaders,
-				...body !== void 0 ? { body: JSON.stringify(body) } : {},
-				signal: controller.signal
-			});
+			releaseBudget = acquireDocsOpenApiMcpBudget(budgetKey, openapiConfig);
+			let response;
+			let destination = requestUrl;
+			const maxRedirects = Math.max(0, openapiConfig.maxRedirects ?? 0);
+			for (let redirectCount = 0; redirectCount <= maxRedirects; redirectCount += 1) {
+				response = await fetch(destination, {
+					method: operation.method,
+					headers: requestHeaders,
+					...body !== void 0 ? { body: JSON.stringify(body) } : {},
+					redirect: "manual",
+					signal: controller.signal
+				});
+				if (![
+					301,
+					302,
+					303,
+					307,
+					308
+				].includes(response.status)) break;
+				const location = response.headers.get("location");
+				if (!location || redirectCount >= maxRedirects) throw new ProtocolError(ProtocolErrorCode.InvalidRequest, "OpenAPI MCP redirect blocked. Increase maxRedirects to follow validated redirects.");
+				destination = new URL(location, destination);
+				try {
+					await validateDocsOpenApiMcpUrl(destination, openapiConfig);
+				} catch (error) {
+					throw new ProtocolError(ProtocolErrorCode.InvalidRequest, error instanceof Error ? error.message : "OpenAPI MCP redirect was blocked.");
+				}
+			}
+			if (!response) throw new ProtocolError(ProtocolErrorCode.InternalError, "No API response.");
 			const contentType = response.headers.get("content-type") ?? void 0;
-			const text = (await response.text()).slice(0, 1e6);
+			const { text, truncated } = await readDocsOpenApiMcpResponse(response, openapiConfig.maxResponseBytes);
 			let responseBody = text;
-			if (contentType?.includes("json") && text) try {
+			if (contentType?.includes("json") && text && !truncated) try {
 				responseBody = JSON.parse(text);
 			} catch {
 				responseBody = text;
@@ -3452,6 +3506,7 @@ async function createDocsMcpServer(options) {
 				status: response.status,
 				ok: response.ok,
 				...contentType ? { contentType } : {},
+				...truncated ? { responseTruncated: true } : {},
 				body: responseBody
 			};
 			trackMcpTool(operation.toolName, { resultCount: 1 });
@@ -3460,6 +3515,7 @@ async function createDocsMcpServer(options) {
 				...response.ok ? {} : { isError: true }
 			};
 		} finally {
+			releaseBudget?.();
 			clearTimeout(timeout);
 		}
 	});
@@ -3521,11 +3577,12 @@ async function createDocsMcpServer(options) {
 		if (!contentChangesEnabled) throw new ProtocolError(ProtocolErrorCode.MethodNotFound, "Content changes are disabled.");
 		if (since && !isDocsContentChangeGeneration(since)) throw new ProtocolError(ProtocolErrorCode.InvalidParams, "Content-change `since` must be a SHA-256 index generation.");
 		const resolvedLocale = resolveSourceLocale(locale);
-		const pages = dedupePages(await options.source.getPages(resolvedLocale, options.requestContext));
+		const pages = dedupePages(await getResolvedSourcePages(resolvedLocale));
 		try {
 			return {
 				result: await contentChangeFeed.resolve({
 					pages: toSearchSourcePages(pages),
+					principal: options.requestContext?.auth,
 					search: options.search,
 					audience: "agent",
 					locale: resolvedLocale,
@@ -3713,7 +3770,7 @@ async function createDocsMcpServer(options) {
 			metadata: { tool: "list_pages" }
 		});
 		try {
-			const page = paginateDocsMcpItems(toPageSummaries(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext))).sort(compareDocsMcpPageSummaries), {
+			const page = paginateDocsMcpItems(toPageSummaries(dedupePages(await getResolvedSourcePages(resolvedLocale))).sort(compareDocsMcpPageSummaries), {
 				kind: "mcp.tool/list_pages",
 				scope: stableDocsMcpPaginationScope({ locale: resolvedLocale ?? null }),
 				cursor
@@ -3808,7 +3865,7 @@ async function createDocsMcpServer(options) {
 			metadata: { tool: "list_docs" }
 		});
 		try {
-			const docs = paginateDocsMcpDocsList(listDocsBySection(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext)), {
+			const docs = paginateDocsMcpDocsList(listDocsBySection(dedupePages(await getResolvedSourcePages(resolvedLocale)), {
 				section,
 				entry: options.source.entry
 			}), {
@@ -3906,7 +3963,7 @@ async function createDocsMcpServer(options) {
 			metadata: { tool: "list_tasks" }
 		});
 		try {
-			const page = paginateDocsMcpItems(listDocsTasks(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext)), {
+			const page = paginateDocsMcpItems(listDocsTasks(dedupePages(await getResolvedSourcePages(resolvedLocale)), {
 				query,
 				framework,
 				version,
@@ -4330,7 +4387,8 @@ async function createDocsMcpServer(options) {
 		});
 		try {
 			const facets = await buildDocsSearchFacets({
-				pages: toSearchSourcePages(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext))),
+				pages: toSearchSourcePages(dedupePages(await getResolvedSourcePages(resolvedLocale))),
+				principal: options.requestContext?.auth,
 				search: toolSearchConfig ?? true,
 				audience: resolvedAudience,
 				filters,
@@ -4438,7 +4496,8 @@ async function createDocsMcpServer(options) {
 		});
 		try {
 			const searchResponse = await performDocsSearchWithMetadata({
-				pages: toSearchSourcePages(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext))),
+				pages: toSearchSourcePages(dedupePages(await getResolvedSourcePages(resolvedLocale))),
+				principal: options.requestContext?.auth,
 				query,
 				search: toolSearchConfig ?? true,
 				audience: resolvedAudience,
@@ -4644,7 +4703,8 @@ async function createDocsMcpServer(options) {
 		});
 		try {
 			const result = await buildDocsMcpContext({
-				pages: dedupePages(await options.source.getPages(resolvedLocale, options.requestContext)),
+				pages: dedupePages(await getResolvedSourcePages(resolvedLocale)),
+				principal: options.requestContext?.auth,
 				query,
 				framework,
 				version,
@@ -4752,7 +4812,7 @@ async function createDocsMcpServer(options) {
 			metadata: { tool: "list_page_sections" }
 		});
 		try {
-			const page = findDocsPage(dedupePages(await options.source.getPages(resolvedLocale, options.requestContext)), requestedPath, options.source.entry);
+			const page = findDocsPage(dedupePages(await getResolvedSourcePages(resolvedLocale)), requestedPath, options.source.entry);
 			if (!page) {
 				const elapsed = durationMs(startedAt);
 				await emitDocsAnalyticsEvent(options.analytics, {
@@ -5275,9 +5335,10 @@ function createDocsMcpHttpHandler(options) {
 	const contentChangePollIntervalMs = typeof configuredPollInterval === "number" && Number.isFinite(configuredPollInterval) && configuredPollInterval >= 10 ? Math.floor(configuredPollInterval) : DEFAULT_DOCS_MCP_CONTENT_CHANGE_POLL_INTERVAL_MS;
 	async function readMonitoredState(context) {
 		const locale = options.source.resolveLocale?.(void 0, context);
-		const pages = dedupePages(await options.source.getPages(locale, context));
+		const pages = dedupePages(filterDocsPagesByAccess(await options.source.getPages(locale, context), context.auth));
 		const result = await contentChangeFeed.resolve({
 			pages: toSearchSourcePages(pages),
+			principal: context.auth,
 			search: options.search,
 			audience: "agent",
 			locale,
@@ -5436,9 +5497,10 @@ async function runDocsMcpStdio(options) {
 		if (!contentChangesEnabled) return server;
 		const readState = async () => {
 			const locale = options.source.resolveLocale?.(void 0, requestContext);
-			const pages = dedupePages(await options.source.getPages(locale, requestContext));
+			const pages = dedupePages(filterDocsPagesByAccess(await options.source.getPages(locale, requestContext), requestContext.auth));
 			const result = await contentChangeFeed.resolve({
 				pages: toSearchSourcePages(pages),
+				principal: requestContext.auth,
 				search: options.search,
 				audience: "agent",
 				locale,
@@ -6689,6 +6751,7 @@ async function buildDocsMcpContext(options) {
 	const orderedResults = [...await performDocsSearch({
 		pages: scopedPages.map((page) => searchPageBySource.get(page)),
 		generationPages: allSearchPages,
+		principal: options.principal,
 		query: options.query,
 		search: {
 			enabled: true,

package/dist/{metadata-D4v_R1t5.mjs → metadata-7htr-Xj_.mjs}

@@ -1,4 +1,4 @@
-import { _ as hasStructuredPageAgentContract, v as normalizePageAgentFrontmatter } from "./markdown-sections-7OoA7ylx.mjs";
+import { _ as hasStructuredPageAgentContract, v as normalizePageAgentFrontmatter } from "./markdown-sections-BKy4labo.mjs";
 
 //#region src/metadata.ts
 /**

package/dist/{openapi-mcp-B7u7Y0gB.mjs → openapi-mcp-DQ3xptKo.mjs}

@@ -1,6 +1,6 @@
-import { $t as buildDocsRetrievalDigestProjection, G as isDocsAgentDiscoveryRequest, In as resolveDocsPaginationOffset, Jt as resolveDocsContentChangesConfig, K as isDocsAgentsRequest, Nn as DocsPaginationCursorError, Pn as createDocsPaginationCursor, Q as isDocsSkillRequest, _t as resolveDocsMarkdownRequest, dt as resolveDocsAgentsFormat, lt as resolveDocsAgentFeedbackConfig, pt as resolveDocsLlmsTxtRequest, qt as isDocsContentChangesRequest, ut as resolveDocsAgentFeedbackRequest, xt as resolveDocsSkillFormat } from "./agent-PSrgiJD8.mjs";
-import { s as parseDocsMarkdownSections } from "./markdown-sections-7OoA7ylx.mjs";
-import { K as digestDocsRetrievalContent } from "./standards-discovery-Ckx0tN7B.mjs";
+import { s as parseDocsMarkdownSections } from "./markdown-sections-BKy4labo.mjs";
+import { $ as isDocsSkillRequest, Fn as createDocsPaginationCursor, Jt as isDocsContentChangesRequest, K as isDocsAgentDiscoveryRequest, Ln as resolveDocsPaginationOffset, Pn as DocsPaginationCursorError, St as resolveDocsSkillFormat, Yt as resolveDocsContentChangesConfig, dt as resolveDocsAgentFeedbackRequest, en as buildDocsRetrievalDigestProjection, ft as resolveDocsAgentsFormat, mt as resolveDocsLlmsTxtRequest, q as isDocsAgentsRequest, ut as resolveDocsAgentFeedbackConfig, vt as resolveDocsMarkdownRequest } from "./agent-DCTGj6J7.mjs";
+import { n as digestDocsRetrievalContent } from "./retrieval-digest-B-SgtXKK.mjs";
 import matter from "gray-matter";
 
 //#region src/telemetry.ts
@@ -615,6 +615,70 @@ const HTTP_METHODS = [
 	"options",
 	"head"
 ];
+const OPENAPI_RATE_WINDOW_MS = 6e4;
+const openApiRateWindows = /* @__PURE__ */ new Map();
+function acquireDocsOpenApiMcpBudget(key, config, now = Date.now()) {
+	const requestsPerMinute = Math.max(1, config.requestsPerMinute ?? 60);
+	const maxConcurrentRequests = Math.max(1, config.maxConcurrentRequests ?? 4);
+	let window = openApiRateWindows.get(key);
+	if (!window || now - window.startedAt >= OPENAPI_RATE_WINDOW_MS) {
+		window = {
+			startedAt: now,
+			count: 0,
+			active: window?.active ?? 0
+		};
+		openApiRateWindows.set(key, window);
+	}
+	if (window.count >= requestsPerMinute) throw new Error("OpenAPI MCP rate limit exceeded for this principal and operation.");
+	if (window.active >= maxConcurrentRequests) throw new Error("OpenAPI MCP concurrency limit exceeded for this principal and operation.");
+	window.count += 1;
+	window.active += 1;
+	let released = false;
+	return () => {
+		if (released) return;
+		released = true;
+		window.active = Math.max(0, window.active - 1);
+	};
+}
+async function readDocsOpenApiMcpResponse(response, maxBytes = 1e6) {
+	const limit = Math.max(1, maxBytes);
+	if (!response.body) return {
+		text: "",
+		truncated: false
+	};
+	const reader = response.body.getReader();
+	const chunks = [];
+	let used = 0;
+	let truncated = false;
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (used + value.byteLength > limit) {
+				const remaining = limit - used;
+				if (remaining > 0) chunks.push(value.subarray(0, remaining));
+				used = limit;
+				truncated = true;
+				await reader.cancel("OpenAPI MCP response byte limit reached");
+				break;
+			}
+			chunks.push(value);
+			used += value.byteLength;
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(used);
+	let offset = 0;
+	for (const chunk of chunks) {
+		bytes.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return {
+		text: new TextDecoder().decode(bytes),
+		truncated
+	};
+}
 function asRecord(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
@@ -719,4 +783,4 @@ function resolveDocsOpenApiMcpBaseUrl(document, config) {
 }
 
 //#endregion
-export { resolveDocsTelemetryConfig as C, normalizeDocsTelemetryOrigin as S, emitDocsTelemetryMcpToolEvent as _, MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as a, inferDocsTelemetryAgentSurface as b, GENERATED_AGENT_PROVENANCE_MARKER as c, normalizeGeneratedAgentContent as d, parseGeneratedAgentDocument as f, emitDocsTelemetryEvent as g, emitDocsTelemetryAgentSurfaceEvent as h, DOCS_CONTENT_CHANGE_HYDRATION_FORMAT as i, GENERATED_AGENT_PROVENANCE_VERSION as l, stripGeneratedAgentProvenance as m, resolveDocsOpenApiMcpOperations as n, MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as o, serializeGeneratedAgentDocument as p, DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as r, hydrateDocsContentChanges as s, resolveDocsOpenApiMcpBaseUrl as t, hashGeneratedAgentContent as u, emitDocsTelemetryProjectEvent as v, isLocalDocsTelemetryOrigin as x, getDocsTelemetryFeatures as y };
+export { isLocalDocsTelemetryOrigin as C, inferDocsTelemetryAgentSurface as S, resolveDocsTelemetryConfig as T, emitDocsTelemetryAgentSurfaceEvent as _, DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as a, emitDocsTelemetryProjectEvent as b, MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as c, GENERATED_AGENT_PROVENANCE_VERSION as d, hashGeneratedAgentContent as f, stripGeneratedAgentProvenance as g, serializeGeneratedAgentDocument as h, resolveDocsOpenApiMcpOperations as i, hydrateDocsContentChanges as l, parseGeneratedAgentDocument as m, readDocsOpenApiMcpResponse as n, DOCS_CONTENT_CHANGE_HYDRATION_FORMAT as o, normalizeGeneratedAgentContent as p, resolveDocsOpenApiMcpBaseUrl as r, MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET as s, acquireDocsOpenApiMcpBudget as t, GENERATED_AGENT_PROVENANCE_MARKER as u, emitDocsTelemetryEvent as v, normalizeDocsTelemetryOrigin as w, getDocsTelemetryFeatures as x, emitDocsTelemetryMcpToolEvent as y };

package/dist/openapi-mcp-node-vO3IXVGI.mjs

@@ -0,0 +1,43 @@
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
+
+//#region src/openapi-mcp-node.ts
+function isPrivateIpv4(address) {
+	const octets = address.split(".").map(Number);
+	if (octets.length !== 4 || octets.some((octet) => !Number.isInteger(octet))) return true;
+	const [a, b] = octets;
+	return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && (b === 0 || b === 168) || a === 198 && (b === 18 || b === 19) || a >= 224;
+}
+function isDocsOpenApiMcpPrivateAddress(address) {
+	const normalized = address.trim().toLowerCase().replace(/^\[|\]$/gu, "");
+	const family = isIP(normalized);
+	if (family === 4) return isPrivateIpv4(normalized);
+	if (family !== 6) return true;
+	const mappedIpv4 = normalized.match(/^(?:::ffff:)(\d+\.\d+\.\d+\.\d+)$/u)?.[1];
+	if (mappedIpv4) return isPrivateIpv4(mappedIpv4);
+	return normalized === "::" || normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || /^fe[89ab]/u.test(normalized) || normalized.startsWith("ff");
+}
+async function defaultResolveHost(hostname) {
+	if (isIP(hostname)) return [hostname];
+	return (await lookup(hostname, {
+		all: true,
+		verbatim: true
+	})).map((entry) => entry.address);
+}
+async function validateDocsOpenApiMcpUrl(url, config) {
+	if (url.protocol !== "https:" && !(url.protocol === "http:" && config.allowInsecureHttp)) throw new Error("OpenAPI MCP destinations must use HTTPS unless allowInsecureHttp is enabled.");
+	if (url.username || url.password) throw new Error("OpenAPI MCP destinations cannot contain URL credentials.");
+	if (config.allowPrivateNetwork) return;
+	const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/gu, "");
+	if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local") || hostname.endsWith(".internal") || hostname === "metadata.google.internal") throw new Error(`OpenAPI MCP blocked private destination: ${hostname}`);
+	let addresses;
+	try {
+		addresses = await (config.resolveHost ?? defaultResolveHost)(hostname);
+	} catch {
+		throw new Error(`OpenAPI MCP could not safely resolve destination: ${hostname}`);
+	}
+	if (addresses.length === 0 || addresses.some(isDocsOpenApiMcpPrivateAddress)) throw new Error(`OpenAPI MCP blocked private or unresolved destination: ${hostname}`);
+}
+
+//#endregion
+export { validateDocsOpenApiMcpUrl as t };

package/dist/{package-version-P4TT_9IO.mjs → package-version-Ci99L0yo.mjs}

@@ -1,4 +1,4 @@
-import { i as detectPackageManagerFromProject, l as formatPackageManagerDetection, t as detectFramework, u as installCommand } from "./utils-DcCUwxqS.mjs";
+import { i as detectPackageManagerFromProject, l as formatPackageManagerDetection, t as detectFramework, u as installCommand } from "./utils-Cc1SrVza.mjs";
 import pc from "picocolors";
 import * as p from "@clack/prompts";