spree_mcp 6.0.2 → 6.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb9ced96d5302ee4eaac402b77ef009746a97af19cd0395f335b03c4e36d176f
-  data.tar.gz: 20dd7e9819549159fdd395024f35bb832295978778085b14f8b7536b823475e6
+  metadata.gz: 38b6ba2f07815f146329db7be4d30c9f9c29190842c14370f014a17de3ea848d
+  data.tar.gz: 03747b1df8ed398e5270fecf40cc95299c36ce4dc871858518a9d32619e6c09c
 SHA512:
-  metadata.gz: 041633a3f4bf38d6cfa8bf4f04133138d6fc26854f7988d851549c267761b535c065c23daaf4796f1a544b81797b41e85dc475006cc001f34526b3eb6b236e14
-  data.tar.gz: c4f87d7c6143d39cb043f49929cf1d573681b48db1097686dee014d6a79ef541f77917267959fbd68c31e21a84e58facb8b06dd6e3f7a3ead664106c8298879f
+  metadata.gz: 33197fbccf535cf54d96da786657eccfe56b7bfde60d1d85b49817f320726b4c7462aceb4d798638c50e4f751da7978648356c5ffe4b1ef6522cd8981bac65a7
+  data.tar.gz: ab0d70fff092c0fa0fa3129e6af285d53e623e81681d38553b1cca0db8be5f07ae556c94dfea2abe576dc6a883bd457b5cf19dc76cc6ef9b225dbcc6b38c853a

data/lib/spree/mcp/server.rb

@@ -9,6 +9,22 @@ module Spree
     # request) is not what mounts this. An ordinary admin API controller does,
     # and hands the JSON-RPC message to {MCP::Server#handle_json}.
     module Server
+      # The protocol server, plus the 6.0.0 tool names kept callable through
+      # 6.0.x. They answer `tools/call` but are not in `tools/list`: a client
+      # that learned one keeps working, and a new one is shown only the
+      # current names. The gem lists `@tools` and looks a call up through
+      # `#tools`, so an unknown name is resolved there, only when called.
+      class AdminServer < ::MCP::Server
+        # @param resolver [#call] name => MCP tool class, or nil
+        attr_writer :resolver
+
+        def tools
+          resolver = @resolver
+          lookup = Hash.new { |_tools, name| resolver&.call(name) }
+          lookup.merge!(super)
+        end
+      end
+
       # What the model is told about using this server at discovery, so it
       # reaches for the discovery tools before guessing at names and filters.
       INSTRUCTIONS = <<~TEXT.freeze
@@ -47,7 +63,7 @@ module Spree
         # @param context [Spree::AgentTools::Context] who is asking, and where
         # @return [MCP::Server]
         def for(context)
-          server = ::MCP::Server.new(
+          server = AdminServer.new(
             name: 'spree-admin',
             title: "#{context.store.name} (Spree admin)",
             version: Spree.version,
@@ -56,6 +72,10 @@ module Spree
             server_context: { store_id: context.store.id }
           )
 
+          server.resolver = lambda do |name|
+            tool = Spree.admin_agent_tools.find_for(name, context)
+            ToolAdapter.build(tool) if tool
+          end
           register_resources(server, context)
           server
         end

data/lib/spree/mcp/tool_adapter.rb

@@ -24,36 +24,35 @@ module Spree
           ) { |**arguments| adapter.respond(tool, arguments) }
         end
 
-        # The tool's declared params as JSON Schema.
+        # The tool's arguments as the gem's schema object, built once per tool
+        # class. Building one deep-copies and validates the schema, and an
+        # action tool's schema is a whole request body: done on every request
+        # for every tool, it was most of what answering `tools/list` cost.
+        # Keyed weakly by the tool class, so a class replaced on a code reload
+        # is let go with its schema.
         #
         # @param tool [Spree::AgentTool]
-        # @return [Hash]
+        # @return [MCP::Tool::InputSchema]
         def input_schema(tool)
-          properties = tool.params.to_h do |name, options|
-            property = { type: json_type(options[:type]) }
-            property[:description] = options[:description] if options[:description].present?
-            # An array must say what it holds: a client validating arguments
-            # against the schema refuses the call otherwise.
-            property[:items] = { type: json_type(options[:items] || :string) } if property[:type] == 'array'
-
-            [name.to_s, property]
-          end
-
-          {
-            type: 'object',
-            properties: properties,
-            required: tool.params.select { |_name, options| options[:required] }.keys.map(&:to_s)
-          }
+          schemas[tool.class] ||= ::MCP::Tool::InputSchema.new(tool.class.input_schema)
         end
 
         # Clients that gate confirmation on annotations rather than on a
-        # server's word need both hints set explicitly: the gem defaults
-        # `destructiveHint` to true, so a read tool that says nothing would be
-        # confirmed like a deletion.
+        # server's word need every hint set explicitly: the protocol defaults
+        # `destructiveHint` and `openWorldHint` to true, so a tool that says
+        # nothing would be confirmed like a deletion that leaves the store.
+        # Every write runs the same workflow the dashboard does, which can
+        # email, charge a gateway or fire webhooks, so writes are open-world
+        # and reads are not.
         #
         # @return [Hash]
         def annotations(tool)
-          { read_only_hint: !tool.mutating?, destructive_hint: tool.mutating?, idempotent_hint: !tool.mutating? }
+          {
+            read_only_hint: !tool.mutating?,
+            destructive_hint: tool.destructive?,
+            idempotent_hint: !tool.mutating?,
+            open_world_hint: tool.mutating?
+          }
         end
 
         # A tool answers with a plain hash. A hash carrying `:error` is the
@@ -88,17 +87,8 @@ module Spree
 
         private
 
-        # A tool declares Ruby-ish types; JSON Schema wants its own names, and
-        # anything unrecognised is a string, which every client can render.
-        def json_type(type)
-          case type&.to_sym
-          when :boolean then 'boolean'
-          when :integer then 'integer'
-          when :number, :float, :decimal then 'number'
-          when :object, :hash then 'object'
-          when :array then 'array'
-          else 'string'
-          end
+        def schemas
+          @schemas ||= ObjectSpace::WeakKeyMap.new
         end
 
         # A line the client can show beside its confirmation prompt, and the

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_mcp
 version: !ruby/object:Gem::Version
-  version: 6.0.2
+  version: 6.0.3
 platform: ruby
 authors:
 - Vendo Connect Inc.
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-11-02 00:00:00.000000000 Z
+date: 2026-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -17,28 +17,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.3
 - !ruby/object:Gem::Dependency
   name: spree_api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.3
 - !ruby/object:Gem::Dependency
   name: mcp
   requirement: !ruby/object:Gem::Requirement
@@ -76,9 +76,9 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.2
+  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.3
   documentation_uri: https://spreecommerce.org/docs/
-  source_code_uri: https://github.com/spree/spree/tree/v6.0.2
+  source_code_uri: https://github.com/spree/spree/tree/v6.0.3
 post_install_message:
 rdoc_options: []
 require_paths: