Split documentation into protocol spec and tooling sites (#830)

* feat(site): split into agentreceipts.ai (spec) and obsigna.dev (tooling)

Move all tooling content (getting-started, SDKs, mcp-proxy, hook,
dashboard, deployment, openclaw, reference) to a new site-obsigna/
Astro+Starlight project that will deploy to obsigna.dev via a
cross-repo GH Pages push to agent-receipts/obsigna-site.

site/ is now spec-only: specification/, ecosystem/, blog/, and a
rewritten spec-centric homepage. site-obsigna/ gets a teal/dark
theme and an Overview→choose-your-path homepage.

Blog is synced at build time from site/ to site-obsigna/ via
scripts/sync-blog.mjs (modelled after the existing sync-spec.mjs).

All cross-links updated: spec pages (agentreceipts.ai) that
referenced tooling now use absolute obsigna.dev URLs, and tooling
pages (obsigna.dev) that referenced spec now use absolute
agentreceipts.ai URLs.

Two manual prerequisites before the first deploy:
  1. Create a fine-grained PAT for agent-receipts/obsigna-site
     (Contents: Read+Write) and add it as OBSIGNA_SITE_DEPLOY_PAT
     in agent-receipts/obsigna secrets.
  2. Switch obsigna-site GH Pages from workflow-based to
     branch-based (Settings → Pages → gh-pages branch).

* fix(site): stage missed site/ modifications from split

The previous commit moved content and added site-obsigna/ but did
not stage the edits to site/ itself:

- astro.config.mjs: strip tooling sections, add obsigna.dev link
- index.mdx: rewrite as spec-centric homepage
- blog/openclaw-plugin-deep-dive.mdx: update tooling links to
  obsigna.dev (absolute URLs)
- specification/parameter-disclosure.mdx: update SDK and daemon-setup
  links to obsigna.dev (absolute URLs)

* docs(site): adopt flexoki theme, fix social links, reorder obsigna nav

- Apply the flexoki Starlight theme to both site/ and site-obsigna/ for a
  consistent look; drop site-obsigna's teal accent overrides so the theme
  owns the palette.
- Point the GitHub social link at agent-receipts/obsigna on both sites
  (was the old agent-receipts/ar repo).
- Reorder the obsigna sidebar: Hook above MCP Proxy (the hook is the
  fastest path), and Dashboard above the SDKs.

* docs(site): lead with the hook and surface tooling on the homepages

- Spec homepage (agentreceipts.ai): move the tooling section up to just
  below the intro and reword it as a 'Use it today' callout with direct
  links to each obsigna.dev tool, so readers discover the working tooling
  immediately. Give the ecosystem reference its own heading.
- Obsigna homepage: reword the title to 'sign and verify every AI agent
  action' and reorder 'Choose your path' so the hook leads as the fastest
  path, ahead of the MCP proxy and SDKs.

* docs(site): set flexoki accent colors (orange for obsigna, green for spec)

Give each site a distinct accent within the shared flexoki theme:
obsigna.dev uses orange, the spec site uses green.

* ci(site-obsigna): pin actions-gh-pages to a commit SHA

Pin peaceiris/actions-gh-pages to the v4.1.0 commit SHA (the version the
@v4 floating tag currently resolves to), consistent with the SHA-pinned
checkout and setup-node actions in this workflow. Resolves the TODO.

Author: ojongerius

.github/workflows/mdx-snippets.yml

@@ -16,6 +16,7 @@ on:
     branches: [main]
     paths: &paths
       - "site/src/content/**/*.mdx"
+      - "site-obsigna/src/content/**/*.mdx"
       - "scripts/readme_snippets/**"
       - ".github/workflows/mdx-snippets.yml"
       - "sdk/go/**"
@@ -37,7 +38,7 @@ jobs:
         with:
           go-version: "1.26"
       - name: Run Go .mdx snippets (in-tree)
-        run: python3 scripts/readme_snippets/check.py --lang go --source local --mode run $(find site/src/content -name '*.mdx' | sort)
+        run: python3 scripts/readme_snippets/check.py --lang go --source local --mode run $(find site/src/content site-obsigna/src/content -name '*.mdx' | sort)
 
   typescript:
     runs-on: ubuntu-latest
@@ -55,11 +56,11 @@ jobs:
         working-directory: sdk/ts
         run: pnpm install --frozen-lockfile && pnpm run build
       - name: Run TypeScript .mdx snippets (in-tree)
-        run: python3 scripts/readme_snippets/check.py --lang ts --source local --mode run $(find site/src/content -name '*.mdx' | sort)
+        run: python3 scripts/readme_snippets/check.py --lang ts --source local --mode run $(find site/src/content site-obsigna/src/content -name '*.mdx' | sort)
 
   python:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: Run Python .mdx snippets (in-tree)
-        run: python3 scripts/readme_snippets/check.py --lang py --source local --mode run $(find site/src/content -name '*.mdx' | sort)
+        run: python3 scripts/readme_snippets/check.py --lang py --source local --mode run $(find site/src/content site-obsigna/src/content -name '*.mdx' | sort)

.github/workflows/site-obsigna.yml

@@ -0,0 +1,49 @@
+name: Site (obsigna.dev)
+
+on:
+  push:
+    branches: [main]
+    paths: [site-obsigna/**, sdk/go/**, sdk/ts/**, sdk/py/**, mcp-proxy/**, hook/**]
+  pull_request:
+    branches: [main]
+    paths: [site-obsigna/**]
+
+permissions:
+  contents: read
+
+defaults:
+  run:
+    working-directory: site-obsigna
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+        with:
+          node-version: "24"
+
+      - name: Install pnpm
+        run: corepack enable && corepack install
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install Playwright Chromium (for mermaid rendering)
+        run: pnpm exec playwright install --with-deps chromium
+
+      - name: Build site
+        run: pnpm build
+
+      - name: Deploy to obsigna-site gh-pages
+        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+        uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
+        with:
+          personal_token: ${{ secrets.OBSIGNA_SITE_DEPLOY_PAT }}
+          external_repository: agent-receipts/obsigna-site
+          publish_dir: site-obsigna/dist
+          cname: obsigna.dev

site-obsigna/.gitignore

@@ -0,0 +1,16 @@
+# Astro
+dist/
+.astro/
+
+# Generated by scripts/sync-blog.mjs from site/src/content/docs/blog/
+src/content/docs/blog/
+
+# Dependencies
+node_modules/
+
+# Environment
+.env
+.env.*
+
+# OS
+.DS_Store

site-obsigna/astro.config.mjs

@@ -0,0 +1,187 @@
+import { defineConfig } from "astro/config";
+import starlight from "@astrojs/starlight";
+import starlightThemeFlexoki from "starlight-theme-flexoki";
+import rehypeMermaid from "rehype-mermaid";
+
+export default defineConfig({
+  site: "https://obsigna.dev",
+  markdown: {
+    // See site/astro.config.mjs for explanation of why this is set explicitly.
+    gfm: true,
+    syntaxHighlight: {
+      type: "shiki",
+      excludeLangs: ["mermaid"],
+    },
+    rehypePlugins: [[rehypeMermaid, { strategy: "inline-svg" }]],
+  },
+  integrations: [
+    starlight({
+      title: "Obsigna",
+      tagline: "Tooling for the Agent Receipts protocol",
+      plugins: [starlightThemeFlexoki({ accentColor: "orange" })],
+      head: [
+        {
+          tag: "link",
+          attrs: {
+            rel: "me",
+            href: "https://github.com/agent-receipts",
+          },
+        },
+        {
+          tag: "script",
+          attrs: { type: "application/ld+json" },
+          content: JSON.stringify({
+            "@context": "https://schema.org",
+            "@type": "WebSite",
+            name: "Obsigna",
+            url: "https://obsigna.dev",
+            publisher: {
+              "@type": "Organization",
+              name: "Agent Receipts",
+              url: "https://agentreceipts.ai",
+              sameAs: ["https://github.com/agent-receipts"],
+            },
+          }),
+        },
+      ],
+      social: [
+        {
+          icon: "github",
+          label: "GitHub",
+          href: "https://github.com/agent-receipts/obsigna",
+        },
+      ],
+      components: {
+        SocialIcons: "./src/components/SocialIcons.astro",
+      },
+      customCss: ["./src/styles/custom.css"],
+      sidebar: [
+        {
+          label: "Getting Started",
+          items: [
+            { label: "Introduction", slug: "" },
+            { label: "Quick Start", slug: "getting-started/quick-start" },
+            { label: "Daemon Setup", slug: "getting-started/daemon-setup" },
+            { label: "End-to-End Walkthrough", slug: "getting-started/end-to-end" },
+          ],
+        },
+        {
+          label: "Hook",
+          items: [
+            { label: "Overview", slug: "hook/overview" },
+            { label: "Installation", slug: "hook/installation" },
+            { label: "Claude Code", slug: "hook/claude-code" },
+          ],
+        },
+        {
+          label: "MCP Proxy",
+          items: [
+            { label: "Overview", slug: "mcp-proxy/overview" },
+            { label: "Installation", slug: "mcp-proxy/installation" },
+            { label: "Configuration", slug: "mcp-proxy/configuration" },
+            { label: "Remote MCP Servers", slug: "mcp-proxy/remote-servers" },
+            { label: "Approval Server", slug: "mcp-proxy/approval-ui" },
+            { label: "Claude Desktop", slug: "mcp-proxy/claude-desktop" },
+            { label: "Claude Code", slug: "mcp-proxy/claude-code" },
+            { label: "Codex", slug: "mcp-proxy/codex" },
+            { label: "Cursor", slug: "mcp-proxy/cursor" },
+            { label: "Windsurf", slug: "mcp-proxy/windsurf" },
+            { label: "VS Code Copilot", slug: "mcp-proxy/vscode-copilot" },
+            {
+              label: "JetBrains AI Assistant",
+              slug: "mcp-proxy/jetbrains",
+            },
+            { label: "Cline", slug: "mcp-proxy/cline" },
+          ],
+        },
+        {
+          label: "Dashboard",
+          items: [
+            { label: "Overview", slug: "dashboard/overview" },
+            { label: "Installation", slug: "dashboard/installation" },
+          ],
+        },
+        {
+          label: "Go SDK",
+          items: [
+            { label: "Overview", slug: "sdk-go/overview" },
+            { label: "Installation", slug: "sdk-go/installation" },
+            { label: "API Reference", slug: "sdk-go/api-reference" },
+          ],
+        },
+        {
+          label: "TypeScript SDK",
+          items: [
+            { label: "Overview", slug: "sdk-ts/overview" },
+            { label: "Installation", slug: "sdk-ts/installation" },
+            { label: "API Reference", slug: "sdk-ts/api-reference" },
+          ],
+        },
+        {
+          label: "Python SDK",
+          items: [
+            { label: "Overview", slug: "sdk-py/overview" },
+            { label: "Installation", slug: "sdk-py/installation" },
+            { label: "API Reference", slug: "sdk-py/api-reference" },
+          ],
+        },
+        {
+          label: "Deployment",
+          items: [
+            {
+              label: "Ephemeral Compute",
+              slug: "deployment/ephemeral-compute",
+            },
+            {
+              label: "Collector Operations",
+              slug: "deployment/collector-operations",
+            },
+          ],
+        },
+        {
+          label: "OpenClaw",
+          items: [
+            { label: "Overview", slug: "openclaw/overview" },
+            { label: "Installation", slug: "openclaw/installation" },
+            { label: "CLI Reference", slug: "openclaw/cli-reference" },
+            { label: "Agent Tools", slug: "openclaw/agent-tools" },
+          ],
+        },
+        {
+          label: "Reference",
+          items: [
+            { label: "CLI Commands", slug: "reference/cli-commands" },
+            { label: "Configuration", slug: "reference/configuration" },
+          ],
+        },
+        {
+          label: "Blog",
+          items: [
+            { label: "All Posts", slug: "blog" },
+            {
+              label: "Agent Security Tooling Landscape — May 2026",
+              slug: "blog/agent-security-tooling-landscape-may-2026",
+            },
+            {
+              label: "The audit boundary belongs outside the agent",
+              slug: "blog/daemon-process-separation",
+            },
+            {
+              label: "OpenClaw Plugin: How It Works",
+              slug: "blog/openclaw-plugin-deep-dive",
+            },
+            {
+              label: "Agent Security Tooling Landscape — April 2026",
+              slug: "blog/agent-security-tooling-landscape-april-2026",
+            },
+          ],
+        },
+        {
+          label: "Protocol Spec →",
+          link: "https://agentreceipts.ai",
+          attrs: { target: "_blank" },
+        },
+      ],
+    }),
+  ],
+});

site-obsigna/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "obsigna-docs",
+  "type": "module",
+  "version": "0.0.1",
+  "private": true,
+  "packageManager": "pnpm@9.15.9",
+  "scripts": {
+    "sync-blog": "node scripts/sync-blog.mjs",
+    "test": "node --test \"scripts/**/*.test.mjs\"",
+    "predev": "node scripts/sync-blog.mjs",
+    "prebuild": "node scripts/sync-blog.mjs",
+    "dev": "astro dev",
+    "build": "astro build",
+    "preview": "astro preview",
+    "astro": "astro"
+  },
+  "dependencies": {
+    "@astrojs/starlight": "^0.39",
+    "astro": "^6",
+    "sharp": "^0.34",
+    "starlight-theme-flexoki": "^0.2.2"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "esbuild",
+      "sharp"
+    ]
+  },
+  "devDependencies": {
+    "playwright": "^1.60.0",
+    "rehype-mermaid": "^3.0.0"
+  }
+}