@typeroll/mcp-server 0.45.20 → 0.45.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/AGENTS.md CHANGED
@@ -1072,3 +1072,30 @@ properties only: reject dotted paths rather than inventing nested addresses.
1072
1072
  Read https://typeroll.com/docs/guides/publication-validation/ for the contract
1073
1073
  and customer migration guidance. Update the organization build engine after the
1074
1074
  matching Core release before publishing.
1075
+
1076
+
1077
+ ## Typed owner answers and pending review (next release)
1078
+
1079
+ Core 0.2.24 does not include this contract. Boolean answers distinguish true,
1080
+ false and unknown; omit untouched answers and send null only for an intentional
1081
+ clear. Structured arrays use an explicit stable text `item_key`. Sources and
1082
+ authority apply per schema leaf; unchanged imported values are not confirmed.
1083
+ `answer_sources` on Page updates/replacements accepts source_url/import_run_id,
1084
+ never actor identity. Owner/reviewer values cannot be overwritten by imports or
1085
+ agents. Report conflicts rather than retrying an overwrite.
1086
+
1087
+ Owner Extensions submit isolated proposals using the current answer revision.
1088
+ Pending proposals are outside Pages, working copies and publication. Review is
1089
+ an explicit, idempotent decision; acceptance and publication are separate.
1090
+ Site-admin MCP tools list/read/configure/decide/revoke owner proposals and manage
1091
+ bounded notification retry/recovery. Never include private review links or
1092
+ identities in public content. See the shared owner-review guide for the full
1093
+ API and migration contract. Private app authentication remains app-owned.
1094
+
1095
+ An ordinary site administrator can use `call_extension_admin` for an enabled app's
1096
+ host-approved native admin API. Read that installation's private guide for the
1097
+ relative path, schema and effects. This does not expose delegation credentials or
1098
+ automatically publish. `read_owner_answers` and `override_owner_answers` provide
1099
+ revision-bound, reason-audited administrative correction; a rejected import is not
1100
+ permission to override an owner. An app must require the owner-fields descriptor's
1101
+ `review_ready` before issuing a visitor editing link.