@gemmein/mcp 0.6.0 → 0.7.0

package/dist/relays.js

@@ -41,6 +41,9 @@ const PRODUCT_NAME_RE = /^[a-z0-9][a-z0-9 _.-]{0,39}$/i;
 const MAX_RELAY_CREDITS = 10000;
 const SCHEMES = ["hmac_sha256_header", "stripe", "svix", "shared_token"];
 const PERSON_ACTIONS = new Set(["grant_access", "grant_credits", "revoke_access", "email_person", "fulfil_product", "refund_product"]);
+/** W10 §1 E — mirrors apps/api/src/relays/schema.ts. */
+const PERSON_MAP_KEYS = ["person_email", "person_id", "person_token"];
+const PERSON_KEYS_SENTENCE = "person_email (their address, which invites someone who has never signed in), person_id (a gemmein person id) or person_token (the store account token their app filed with a store)";
 const ENTITLEMENT_KEY = /^access:[a-z0-9][a-z0-9._-]{0,63}$/;
 const RESERVED_FIELD_NAMES = new Set([
     "id", "appId", "app_id", "environmentId", "environment_id", "userId", "user_id", "ownerId", "ownerUserId", "owner_user_id",
@@ -179,6 +182,10 @@ function validateReceiver(t) {
                 refuse(`trigger.map.${key} walks through "${path.split(".").find((seg) => isUnsafeName(seg))}", which is never a field`);
             map[key] = path;
         }
+        const named = PERSON_MAP_KEYS.filter((k) => k in map);
+        if (named.length > 1) {
+            refuse(`trigger.map names ${named.join(" and ")} — a map names the person ONE way: ${PERSON_KEYS_SENTENCE}. Keep the one your provider actually sends and delete the others.`);
+        }
     }
     let when;
     if (t.when !== undefined) {
@@ -263,7 +270,7 @@ function validateAction(raw, index, triggerKind) {
         refuse(`${what}.type "${type}" is not an action the engine has — the verbs are ${ACTION_TYPES.join(", ")}; anything else is compute, and compute runs on your own server behind call_url`);
     }
     if (triggerKind === "schedule" && PERSON_ACTIONS.has(type)) {
-        refuse(`${what}: a schedule has no person, so ${type} has no one to act on — trigger it from a receiver whose map names person_email, or from a data_change on a collection whose records have an owner`);
+        refuse(`${what}: a schedule has no person, so ${type} has no one to act on — trigger it from a receiver whose map names ${PERSON_KEYS_SENTENCE}, or from a data_change on a collection whose records have an owner`);
     }
     switch (type) {
         case "write_record": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemmein/mcp",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "mcpName": "com.gemmein/mcp",
   "description": "Gemmein MCP server \u2014 gives coding agents the Gemmein guide, API reference, rule/error explainers, and a live integration check (reaffirm) as tools. Read-only: it never creates, edits, or deletes anything.",
   "license": "MIT",
@@ -34,7 +34,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@gemmein/sdk": "^0.9.0",
+    "@gemmein/sdk": "^0.10.0",
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "author": "Gemmein Limited",