spree_mcp 6.0.2 → 6.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb9ced96d5302ee4eaac402b77ef009746a97af19cd0395f335b03c4e36d176f
-  data.tar.gz: 20dd7e9819549159fdd395024f35bb832295978778085b14f8b7536b823475e6
+  metadata.gz: ea3e895b47908ef85cefc8dc52477c4f0626c303cd29bad2f951a0616de02153
+  data.tar.gz: e5e49db768e488711faf68b1a82e6c361023b75a35776842880f15fc55c2b09d
 SHA512:
-  metadata.gz: 041633a3f4bf38d6cfa8bf4f04133138d6fc26854f7988d851549c267761b535c065c23daaf4796f1a544b81797b41e85dc475006cc001f34526b3eb6b236e14
-  data.tar.gz: c4f87d7c6143d39cb043f49929cf1d573681b48db1097686dee014d6a79ef541f77917267959fbd68c31e21a84e58facb8b06dd6e3f7a3ead664106c8298879f
+  metadata.gz: 8a503624ec3ab6e62768c948f4836a2e476777c55f623a012b61e7ce0c2170c35395186cbdcbf85878453479ff6ba592e53123734524c18a1885f2d5a9ca1c49
+  data.tar.gz: e641107a176fd70d965e40827df7c12884d8d036315868ae308df2f19bc58796318d705ffe983623b0bc4482d4728b222fd77b92ee5a8decee998cec0cc09005

data/README.md

@@ -10,10 +10,15 @@ API.
 spree add mcp   # or add gem 'spree_mcp' to the Gemfile
 ```
 
-The endpoint is `POST /api/v3/admin/mcp`, authenticated with a Spree secret API
-key sent as `X-Spree-API-Key: sk_…` or `Authorization: Bearer sk_…`. The key's
-scopes decide which tools the model is offered, so an agent is never told about
-a capability its credential does not carry.
+The endpoint is `POST /api/v3/admin/mcp`, authenticated with an OAuth token
+issued to a person: the client sends them to the store to sign in and approve
+what it may do. The token carries that admin's own permissions, narrowed to
+what they approved, and those decide which tools the model is offered, so an
+agent is never told about a capability its credential does not carry.
+
+A Spree secret API key (`sk_…`) is deliberately refused here. A nightly job or
+a server-side integration has no person behind it; it calls the Admin API with
+a key, or uses the `spree api` CLI.
 
 This gem is a protocol adapter and nothing more. The tools, their schemas and
 the permissions gating them live in `spree_core` as `Spree.admin_agent_tools`, which

data/app/controllers/spree/api/v3/admin/mcp_controller.rb

@@ -29,6 +29,13 @@ module Spree
           # client is misconfigured.
           prepend_before_action :require_oauth_token!
 
+          # The body is a JSON-RPC envelope, not an Admin API payload, so a
+          # key named `price` in it may be anything: the column an import
+          # mapping reads prices from, say. Amounts are still checked where
+          # they are written — by the Admin API a tool dispatches to, or by
+          # the model's own canonical decimal setters.
+          skip_before_action :refuse_noncanonical_decimals
+
           def create
             render json: server.handle_json(request.body.read), content_type: 'application/json'
           end

data/lib/spree/mcp/server.rb

@@ -9,6 +9,22 @@ module Spree
     # request) is not what mounts this. An ordinary admin API controller does,
     # and hands the JSON-RPC message to {MCP::Server#handle_json}.
     module Server
+      # The protocol server, plus the 6.0.0 tool names kept callable through
+      # 6.0.x. They answer `tools/call` but are not in `tools/list`: a client
+      # that learned one keeps working, and a new one is shown only the
+      # current names. The gem lists `@tools` and looks a call up through
+      # `#tools`, so an unknown name is resolved there, only when called.
+      class AdminServer < ::MCP::Server
+        # @param resolver [#call] name => MCP tool class, or nil
+        attr_writer :resolver
+
+        def tools
+          resolver = @resolver
+          lookup = Hash.new { |_tools, name| resolver&.call(name) }
+          lookup.merge!(super)
+        end
+      end
+
       # What the model is told about using this server at discovery, so it
       # reaches for the discovery tools before guessing at names and filters.
       INSTRUCTIONS = <<~TEXT.freeze
@@ -47,7 +63,7 @@ module Spree
         # @param context [Spree::AgentTools::Context] who is asking, and where
         # @return [MCP::Server]
         def for(context)
-          server = ::MCP::Server.new(
+          server = AdminServer.new(
             name: 'spree-admin',
             title: "#{context.store.name} (Spree admin)",
             version: Spree.version,
@@ -56,6 +72,10 @@ module Spree
             server_context: { store_id: context.store.id }
           )
 
+          server.resolver = lambda do |name|
+            tool = Spree.admin_agent_tools.find_for(name, context)
+            ToolAdapter.build(tool) if tool
+          end
           register_resources(server, context)
           server
         end

data/lib/spree/mcp/tool_adapter.rb

@@ -24,36 +24,35 @@ module Spree
           ) { |**arguments| adapter.respond(tool, arguments) }
         end
 
-        # The tool's declared params as JSON Schema.
+        # The tool's arguments as the gem's schema object, built once per tool
+        # class. Building one deep-copies and validates the schema, and an
+        # action tool's schema is a whole request body: done on every request
+        # for every tool, it was most of what answering `tools/list` cost.
+        # Keyed weakly by the tool class, so a class replaced on a code reload
+        # is let go with its schema.
         #
         # @param tool [Spree::AgentTool]
-        # @return [Hash]
+        # @return [MCP::Tool::InputSchema]
         def input_schema(tool)
-          properties = tool.params.to_h do |name, options|
-            property = { type: json_type(options[:type]) }
-            property[:description] = options[:description] if options[:description].present?
-            # An array must say what it holds: a client validating arguments
-            # against the schema refuses the call otherwise.
-            property[:items] = { type: json_type(options[:items] || :string) } if property[:type] == 'array'
-
-            [name.to_s, property]
-          end
-
-          {
-            type: 'object',
-            properties: properties,
-            required: tool.params.select { |_name, options| options[:required] }.keys.map(&:to_s)
-          }
+          schemas[tool.class] ||= ::MCP::Tool::InputSchema.new(tool.class.input_schema)
         end
 
         # Clients that gate confirmation on annotations rather than on a
-        # server's word need both hints set explicitly: the gem defaults
-        # `destructiveHint` to true, so a read tool that says nothing would be
-        # confirmed like a deletion.
+        # server's word need every hint set explicitly: the protocol defaults
+        # `destructiveHint` and `openWorldHint` to true, so a tool that says
+        # nothing would be confirmed like a deletion that leaves the store.
+        # Every write runs the same workflow the dashboard does, which can
+        # email, charge a gateway or fire webhooks, so writes are open-world
+        # and reads are not.
         #
         # @return [Hash]
         def annotations(tool)
-          { read_only_hint: !tool.mutating?, destructive_hint: tool.mutating?, idempotent_hint: !tool.mutating? }
+          {
+            read_only_hint: !tool.mutating?,
+            destructive_hint: tool.destructive?,
+            idempotent_hint: !tool.mutating?,
+            open_world_hint: tool.mutating?
+          }
         end
 
         # A tool answers with a plain hash. A hash carrying `:error` is the
@@ -88,17 +87,8 @@ module Spree
 
         private
 
-        # A tool declares Ruby-ish types; JSON Schema wants its own names, and
-        # anything unrecognised is a string, which every client can render.
-        def json_type(type)
-          case type&.to_sym
-          when :boolean then 'boolean'
-          when :integer then 'integer'
-          when :number, :float, :decimal then 'number'
-          when :object, :hash then 'object'
-          when :array then 'array'
-          else 'string'
-          end
+        def schemas
+          @schemas ||= ObjectSpace::WeakKeyMap.new
         end
 
         # A line the client can show beside its confirmation prompt, and the

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_mcp
 version: !ruby/object:Gem::Version
-  version: 6.0.2
+  version: 6.0.4
 platform: ruby
 authors:
 - Vendo Connect Inc.
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-11-02 00:00:00.000000000 Z
+date: 2026-11-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -17,28 +17,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.4
 - !ruby/object:Gem::Dependency
   name: spree_api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.2
+        version: 6.0.4
 - !ruby/object:Gem::Dependency
   name: mcp
   requirement: !ruby/object:Gem::Requirement
@@ -76,9 +76,9 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.2
+  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.4
   documentation_uri: https://spreecommerce.org/docs/
-  source_code_uri: https://github.com/spree/spree/tree/v6.0.2
+  source_code_uri: https://github.com/spree/spree/tree/v6.0.4
 post_install_message:
 rdoc_options: []
 require_paths: