opedd-mcp 0.6.15 → 0.7.0

package/README.md

@@ -78,7 +78,7 @@ Prefer zero-install? The same 17 tools are served hosted at **`https://mcp.opedd
 }
 ```
 
-Key routing: `opedd_pub_*` → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
+Key routing: `opedd_sk_*` (legacy `opedd_pub_*`) → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
 
 ## What it does
 
@@ -119,7 +119,7 @@ Exposes up to 17 tools to any AI assistant (some are conditional on env vars):
 | `get_compliance_dossier` | Procurement-defense compliance dossier mapping retrievals to license terms (Phase 11 M4) |
 | `article_53_attestation` | Signed JWT attesting EU AI Act Article 53(1)(d) compliance for a license — the artifact AI labs hand to legal/procurement (Phase 12 W1.4) |
 
-**Requires `OPEDD_PUB_BEARER` (opedd_pub_*) — publisher-side**
+**Requires `OPEDD_PUB_BEARER` (opedd_sk_*; legacy opedd_pub_* still works) — publisher-side**
 
 | Tool | Description |
 |------|-------------|
@@ -159,7 +159,7 @@ Set environment variables to pre-configure the server:
 | `OPEDD_BUYER_TOKEN` | Optional | Buyer API token (`opedd_buyer_live_*` canonical; `opedd_buyer_test_*` for sandbox) — enables `get_content` |
 | `OPEDD_ACCESS_KEY` | Optional | Enterprise access key (`ent_*`) — enables `list_feed` + `stream_feed_ndjson` |
 | `OPEDD_BUYER_JWT` | Optional | Supabase session JWT from the buyer portal — enables `get_buyer_account` + `get_audit_events` + `get_compliance_dossier` + `article_53_attestation` |
-| `OPEDD_PUB_BEARER` | Optional | Canonical Publisher API Bearer key (`opedd_pub_<env>_<32-hex>`; issued via `POST /publishers-api-keys action=create_api_key`) — enables `list_publisher_content` + `push_content`. **v0.4.0 canonical.** |
+| `OPEDD_PUB_BEARER` | Optional | Publisher API key (`opedd_sk_<32-hex>`, canonical since 2026-08-27; older `opedd_pub_<32-hex>` keys keep working) — from the Opedd dashboard, Settings → Developers. Enables `list_publisher_content` (+ `include_body`) and `push_content`. |
 | `OPEDD_API_KEY` | Deprecated | Legacy Publisher API key (`op_...`) — fallback during the transition window; will stop working when opedd-backend Phase C deploys. Migrate to `OPEDD_PUB_BEARER`. |
 | `OPEDD_API_URL` | Optional | Override the API base URL (default: Opedd production) |
 | `OPEDD_MCP_TELEMETRY` | Optional | Set to `0` to disable anonymous usage telemetry (see below) |

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export interface Credentials {
     apiBase: string;
     buyerEmail?: string;
     paymentMethodId?: string;
-    /** canonical opedd_pub_<env>_<32-hex> key */
+    /** canonical opedd_sk_<32-hex> key (legacy opedd_pub_ accepted) */
     pubBearer?: string;
     /** LEGACY op_<32-hex> — retiring per backend Phase C */
     apiKey?: string;

package/dist/index.js

@@ -149,7 +149,7 @@ function auditCred(creds) {
 }
 const HOW_ACCESS_KEY = "Enterprise access keys (ent_*) are delivered when an enterprise licence is issued — start at https://opedd.com/enterprise " +
     "or purchase programmatically with the purchase_enterprise_license tool.";
-const HOW_PUB_BEARER = "Publisher keys (opedd_pub_*) come from the publisher dashboard: sign up free at https://opedd.com, then Settings → API keys.";
+const HOW_PUB_BEARER = "Publisher keys (opedd_sk_*, legacy opedd_pub_* still valid) come from the publisher dashboard: sign up free at https://opedd.com, then Settings → API keys.";
 // ─── Tool definitions ─────────────────────────────────────────────────────────
 function buildTools(has) {
     const TOOLS = [
@@ -629,22 +629,36 @@ function buildTools(has) {
             name: "list_publisher_content",
             description: "List all licensable articles for the authenticated publisher (requires OPEDD_PUB_BEARER, or legacy OPEDD_API_KEY). " +
                 "Returns articles with titles, descriptions, pricing, and sales statistics. " +
+                "Set include_body=true to read back the STORED article text exactly as licensed buyers receive it " +
+                "(this is how you check that a push_content call stored what you meant; bodies are truncated to 8,000 characters per article, page size 20, paginate with cursor). " +
                 "Use article IDs from this list to purchase licenses via purchase_license.",
             inputSchema: {
                 type: "object",
                 properties: {
                     limit: {
                         type: "number",
-                        description: "Number of results (default: 20, max: 100)",
+                        description: "Number of results (default: 20, max: 100; max 20 when include_body is true)",
                     },
                     type: {
                         type: "string",
                         enum: ["human", "ai"],
-                        description: "Filter by license type availability",
+                        description: "Filter by license type availability (ignored when include_body is true)",
                     },
                     offset: {
                         type: "number",
-                        description: "Pagination offset (default: 0)",
+                        description: "Pagination offset (default: 0; ignored when include_body is true — use cursor)",
+                    },
+                    include_body: {
+                        type: "boolean",
+                        description: "Return each article's stored body (what buyers receive). Default false.",
+                    },
+                    cursor: {
+                        type: "string",
+                        description: "Opaque next_cursor from a previous include_body=true call.",
+                    },
+                    id: {
+                        type: "string",
+                        description: "With include_body=true: fetch exactly one of your articles by id (full body, no truncation).",
                     },
                 },
             },
@@ -653,7 +667,7 @@ function buildTools(has) {
         // the AI assistant — the native companion to the /publishers-content API.
         TOOLS.push({
             name: "push_content",
-            description: "Push your published articles to Opedd so they can be licensed to AI buyers (requires OPEDD_PUB_BEARER — your opedd_pub_ publisher key). " +
+            description: "Push your published articles to Opedd so they can be licensed to AI buyers (requires OPEDD_PUB_BEARER — your opedd_sk_ publisher key). " +
                 "Send 1–100 articles per call; batch larger back-catalogues into multiple calls. Each article needs title, url, and html_body — everything else is optional (published_at defaults to now). " +
                 "This is the supply-side companion to list_publisher_content: use it to onboard your archive or push new content with no code, straight from your AI assistant.",
             inputSchema: {
@@ -1021,9 +1035,36 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
             // ── list_publisher_content ─────────────────────────────────────────────
             case "list_publisher_content": {
                 if (!creds.pubBearer && !creds.apiKey) {
-                    return credErr("A publisher key (opedd_pub_*) is required for this tool", "OPEDD_PUB_BEARER", HOW_PUB_BEARER);
+                    return credErr("A publisher key (opedd_sk_*) is required for this tool", "OPEDD_PUB_BEARER", HOW_PUB_BEARER);
+                }
+                const { limit = 20, type, offset = 0, include_body, cursor, id } = args;
+                // include_body (2026-09-14): the OWNER read model — GET /publishers-content
+                // returns the stored body for the key's own rows. Bodies are truncated
+                // here to keep the assistant's context bounded; ?id= returns one in full.
+                if (include_body === true) {
+                    const q = new URLSearchParams({ include_body: "true" });
+                    if (typeof id === "string" && id)
+                        q.set("id", id);
+                    else {
+                        q.set("limit", String(Math.min(Math.max(Number(limit) || 20, 1), 20)));
+                        if (typeof cursor === "string" && cursor)
+                            q.set("cursor", cursor);
+                    }
+                    // Backend envelope is { success, data: {...} }; unwrap so the assistant
+                    // sees the payload, not the wrapper (envelope-unwrap rule).
+                    const envelope = (await opeddFetch(creds, `/publishers-content?${q.toString()}`));
+                    const data = envelope.data ?? {};
+                    const MAX = 8_000;
+                    const trim = (a) => {
+                        const body = typeof a.content_body === "string" ? a.content_body : null;
+                        return body !== null && body.length > MAX
+                            ? { ...a, content_body: body.slice(0, MAX), body_truncated: true, body_length: body.length }
+                            : { ...a, body_truncated: false, body_length: body?.length ?? 0 };
+                    };
+                    if (data.article)
+                        return ok({ article: { ...data.article, body_truncated: false, body_length: typeof data.article.content_body === "string" ? data.article.content_body.length : 0 } });
+                    return ok({ articles: (data.articles ?? []).map(trim), pagination: data.pagination ?? null });
                 }
-                const { limit = 20, type, offset = 0 } = args;
                 const params = new URLSearchParams({ action: "articles" });
                 params.set("limit", String(Math.min(Number(limit), 100)));
                 params.set("offset", String(Number(offset)));
@@ -1035,7 +1076,7 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
             // ── push_content ───────────────────────────────────────────────────────
             case "push_content": {
                 if (!creds.pubBearer && !creds.apiKey) {
-                    return credErr("A publisher key (opedd_pub_*) is required for this tool", "OPEDD_PUB_BEARER", HOW_PUB_BEARER);
+                    return credErr("A publisher key (opedd_sk_*) is required for this tool", "OPEDD_PUB_BEARER", HOW_PUB_BEARER);
                 }
                 const { articles } = args;
                 if (!Array.isArray(articles) || articles.length === 0) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.15",
-  "description": "Licensed, rights-cleared content for AI agents — verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
+  "version": "0.7.0",
+  "description": "Licensed, rights-cleared content for AI agents \u2014 verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",
   "mcpName": "com.opedd/opedd-mcp",
@@ -60,4 +60,4 @@
   "overrides": {
     "esbuild": "^0.28.1"
   }
-}
+}