opedd-mcp 0.6.16 → 0.7.0

package/README.md

@@ -78,7 +78,7 @@ Prefer zero-install? The same 17 tools are served hosted at **`https://mcp.opedd
 }
 ```
 
-Key routing: `opedd_pub_*` → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
+Key routing: `opedd_sk_*` (legacy `opedd_pub_*`) → publisher tools · `opedd_buyer_*` → content retrieval · `ent_*` → bulk feeds · buyer-portal JWT → audit/compliance/EU-AI-Act tools. Your key is forwarded per request and never stored by the gateway.
 
 ## What it does
 
@@ -119,7 +119,7 @@ Exposes up to 17 tools to any AI assistant (some are conditional on env vars):
 | `get_compliance_dossier` | Procurement-defense compliance dossier mapping retrievals to license terms (Phase 11 M4) |
 | `article_53_attestation` | Signed JWT attesting EU AI Act Article 53(1)(d) compliance for a license — the artifact AI labs hand to legal/procurement (Phase 12 W1.4) |
 
-**Requires `OPEDD_PUB_BEARER` (opedd_pub_*) — publisher-side**
+**Requires `OPEDD_PUB_BEARER` (opedd_sk_*; legacy opedd_pub_* still works) — publisher-side**
 
 | Tool | Description |
 |------|-------------|
@@ -159,7 +159,7 @@ Set environment variables to pre-configure the server:
 | `OPEDD_BUYER_TOKEN` | Optional | Buyer API token (`opedd_buyer_live_*` canonical; `opedd_buyer_test_*` for sandbox) — enables `get_content` |
 | `OPEDD_ACCESS_KEY` | Optional | Enterprise access key (`ent_*`) — enables `list_feed` + `stream_feed_ndjson` |
 | `OPEDD_BUYER_JWT` | Optional | Supabase session JWT from the buyer portal — enables `get_buyer_account` + `get_audit_events` + `get_compliance_dossier` + `article_53_attestation` |
-| `OPEDD_PUB_BEARER` | Optional | Canonical Publisher API Bearer key (`opedd_pub_<env>_<32-hex>`; issued via `POST /publishers-api-keys action=create_api_key`) — enables `list_publisher_content` + `push_content`. **v0.4.0 canonical.** |
+| `OPEDD_PUB_BEARER` | Optional | Publisher API key (`opedd_sk_<32-hex>`, canonical since 2026-08-27; older `opedd_pub_<32-hex>` keys keep working) — from the Opedd dashboard, Settings → Developers. Enables `list_publisher_content` (+ `include_body`) and `push_content`. |
 | `OPEDD_API_KEY` | Deprecated | Legacy Publisher API key (`op_...`) — fallback during the transition window; will stop working when opedd-backend Phase C deploys. Migrate to `OPEDD_PUB_BEARER`. |
 | `OPEDD_API_URL` | Optional | Override the API base URL (default: Opedd production) |
 | `OPEDD_MCP_TELEMETRY` | Optional | Set to `0` to disable anonymous usage telemetry (see below) |

package/dist/index.js

@@ -629,22 +629,36 @@ function buildTools(has) {
             name: "list_publisher_content",
             description: "List all licensable articles for the authenticated publisher (requires OPEDD_PUB_BEARER, or legacy OPEDD_API_KEY). " +
                 "Returns articles with titles, descriptions, pricing, and sales statistics. " +
+                "Set include_body=true to read back the STORED article text exactly as licensed buyers receive it " +
+                "(this is how you check that a push_content call stored what you meant; bodies are truncated to 8,000 characters per article, page size 20, paginate with cursor). " +
                 "Use article IDs from this list to purchase licenses via purchase_license.",
             inputSchema: {
                 type: "object",
                 properties: {
                     limit: {
                         type: "number",
-                        description: "Number of results (default: 20, max: 100)",
+                        description: "Number of results (default: 20, max: 100; max 20 when include_body is true)",
                     },
                     type: {
                         type: "string",
                         enum: ["human", "ai"],
-                        description: "Filter by license type availability",
+                        description: "Filter by license type availability (ignored when include_body is true)",
                     },
                     offset: {
                         type: "number",
-                        description: "Pagination offset (default: 0)",
+                        description: "Pagination offset (default: 0; ignored when include_body is true — use cursor)",
+                    },
+                    include_body: {
+                        type: "boolean",
+                        description: "Return each article's stored body (what buyers receive). Default false.",
+                    },
+                    cursor: {
+                        type: "string",
+                        description: "Opaque next_cursor from a previous include_body=true call.",
+                    },
+                    id: {
+                        type: "string",
+                        description: "With include_body=true: fetch exactly one of your articles by id (full body, no truncation).",
                     },
                 },
             },
@@ -1023,7 +1037,34 @@ export async function dispatchTool(name, args, creds = ENV_CREDS) {
                 if (!creds.pubBearer && !creds.apiKey) {
                     return credErr("A publisher key (opedd_sk_*) is required for this tool", "OPEDD_PUB_BEARER", HOW_PUB_BEARER);
                 }
-                const { limit = 20, type, offset = 0 } = args;
+                const { limit = 20, type, offset = 0, include_body, cursor, id } = args;
+                // include_body (2026-09-14): the OWNER read model — GET /publishers-content
+                // returns the stored body for the key's own rows. Bodies are truncated
+                // here to keep the assistant's context bounded; ?id= returns one in full.
+                if (include_body === true) {
+                    const q = new URLSearchParams({ include_body: "true" });
+                    if (typeof id === "string" && id)
+                        q.set("id", id);
+                    else {
+                        q.set("limit", String(Math.min(Math.max(Number(limit) || 20, 1), 20)));
+                        if (typeof cursor === "string" && cursor)
+                            q.set("cursor", cursor);
+                    }
+                    // Backend envelope is { success, data: {...} }; unwrap so the assistant
+                    // sees the payload, not the wrapper (envelope-unwrap rule).
+                    const envelope = (await opeddFetch(creds, `/publishers-content?${q.toString()}`));
+                    const data = envelope.data ?? {};
+                    const MAX = 8_000;
+                    const trim = (a) => {
+                        const body = typeof a.content_body === "string" ? a.content_body : null;
+                        return body !== null && body.length > MAX
+                            ? { ...a, content_body: body.slice(0, MAX), body_truncated: true, body_length: body.length }
+                            : { ...a, body_truncated: false, body_length: body?.length ?? 0 };
+                    };
+                    if (data.article)
+                        return ok({ article: { ...data.article, body_truncated: false, body_length: typeof data.article.content_body === "string" ? data.article.content_body.length : 0 } });
+                    return ok({ articles: (data.articles ?? []).map(trim), pagination: data.pagination ?? null });
+                }
                 const params = new URLSearchParams({ action: "articles" });
                 params.set("limit", String(Math.min(Number(limit), 100)));
                 params.set("offset", String(Number(offset)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.16",
+  "version": "0.7.0",
   "description": "Licensed, rights-cleared content for AI agents \u2014 verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",