@gemmein/mcp 0.5.0 → 0.7.0

package/dist/index.js

@@ -225,7 +225,7 @@ async function runIntegrationChecks(input) {
 const TOOLS = [
     {
         name: "guide",
-        description: "Call this FIRST — before any install, account, or code — when your human asks to build an app on Gemmein, to move an existing app onto it, or whether their app can use it at all. The guide (llms.txt) opens with the fit assessment: the in-scope map, the out-of-scope list (each item downgrades the verdict; none may be approximated), and the three verdicts you deliver to your human before installing anything — FITS, FITS EXCEPT <named gaps>, or DOESN'T FIT. After the verdict it is the full build contract: auth flow, the seven collection safety rules, record shapes, links/expand, uploads, contention patterns, payments (g.subscriptions.checkout / g.payments.buy), drafts, error philosophy, pricing.",
+        description: "Call this FIRST — before any install, account, or code — when your human asks to build an app on Gemmein, to move an existing app onto it, or whether their app can use it at all. The guide (llms.txt) opens with the fit assessment: the in-scope map, the out-of-scope list (each item downgrades the verdict; none may be approximated), and the three verdicts you deliver to your human before installing anything — FITS, FITS EXCEPT <named gaps>, or DOESN'T FIT. After the verdict it is the full build contract: auth flow, the seven collection safety rules, record shapes, links/expand, uploads, contention patterns, payments (g.subscriptions.checkout / g.payments.buy), drafts, error philosophy, pricing. It also teaches the keys (server · CLI · sync), `gemmein sync` and `sync --live`, go-live and promotion, relays, AI tools defined on the server and run with `g.ai.run`, and credits.",
         annotations: { title: "Guide", readOnlyHint: true },
         inputSchema: { type: "object", properties: {}, additionalProperties: false },
     },

package/dist/relays.js

@@ -41,6 +41,9 @@ const PRODUCT_NAME_RE = /^[a-z0-9][a-z0-9 _.-]{0,39}$/i;
 const MAX_RELAY_CREDITS = 10000;
 const SCHEMES = ["hmac_sha256_header", "stripe", "svix", "shared_token"];
 const PERSON_ACTIONS = new Set(["grant_access", "grant_credits", "revoke_access", "email_person", "fulfil_product", "refund_product"]);
+/** W10 §1 E — mirrors apps/api/src/relays/schema.ts. */
+const PERSON_MAP_KEYS = ["person_email", "person_id", "person_token"];
+const PERSON_KEYS_SENTENCE = "person_email (their address, which invites someone who has never signed in), person_id (a gemmein person id) or person_token (the store account token their app filed with a store)";
 const ENTITLEMENT_KEY = /^access:[a-z0-9][a-z0-9._-]{0,63}$/;
 const RESERVED_FIELD_NAMES = new Set([
     "id", "appId", "app_id", "environmentId", "environment_id", "userId", "user_id", "ownerId", "ownerUserId", "owner_user_id",
@@ -179,6 +182,10 @@ function validateReceiver(t) {
                 refuse(`trigger.map.${key} walks through "${path.split(".").find((seg) => isUnsafeName(seg))}", which is never a field`);
             map[key] = path;
         }
+        const named = PERSON_MAP_KEYS.filter((k) => k in map);
+        if (named.length > 1) {
+            refuse(`trigger.map names ${named.join(" and ")} — a map names the person ONE way: ${PERSON_KEYS_SENTENCE}. Keep the one your provider actually sends and delete the others.`);
+        }
     }
     let when;
     if (t.when !== undefined) {
@@ -263,7 +270,7 @@ function validateAction(raw, index, triggerKind) {
         refuse(`${what}.type "${type}" is not an action the engine has — the verbs are ${ACTION_TYPES.join(", ")}; anything else is compute, and compute runs on your own server behind call_url`);
     }
     if (triggerKind === "schedule" && PERSON_ACTIONS.has(type)) {
-        refuse(`${what}: a schedule has no person, so ${type} has no one to act on — trigger it from a receiver whose map names person_email, or from a data_change on a collection whose records have an owner`);
+        refuse(`${what}: a schedule has no person, so ${type} has no one to act on — trigger it from a receiver whose map names ${PERSON_KEYS_SENTENCE}, or from a data_change on a collection whose records have an owner`);
     }
     switch (type) {
         case "write_record": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemmein/mcp",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "mcpName": "com.gemmein/mcp",
   "description": "Gemmein MCP server \u2014 gives coding agents the Gemmein guide, API reference, rule/error explainers, and a live integration check (reaffirm) as tools. Read-only: it never creates, edits, or deletes anything.",
   "license": "MIT",
@@ -34,7 +34,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@gemmein/sdk": "^0.8.0",
+    "@gemmein/sdk": "^0.10.0",
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "author": "Gemmein Limited",