gasp-standard-mcp 1.5.0 → 1.7.0

package/README.md

@@ -45,13 +45,16 @@ Restart your MCP client after adding the config.
 ## Data
 
 - 300 metrics across 13 departments
-- 80 glossary definitions
-- 76 relationship nodes (60 metrics + 11 entities + 5 concepts), 157 edges
-- 15 entity-to-entity business model edges (OWNS, GRANTS, CONVERTS_TO, GENERATES, etc.)
+- 92 glossary definitions (80 SaaS domain + 12 GASP framework)
+- 82 relationship nodes (60 metrics + 15 entities + 7 concepts), 164 edges
+- 22 entity-to-entity business model edges (OWNS, GRANTS, CONVERTS_TO, GENERATES, PARENT_OF, PRICED_BY, REPRESENTED_BY, etc.)
 - 78 data requirements with field types, grain, and example SQL
-- 11 business entities, 5 business concepts, 22 source categories, 198 canonical fields
+- 15 business entities (Customer, Subscription, License, Lead, Opportunity, User, Ticket, Employee, Invoice, Partner, Project, Plan, Product, Campaign, Contact)
+- 7 business concepts (Revenue, Bookings, COGS, Cohort, Pipeline, Segment, TCV)
+- 22 source categories, 198 canonical fields
 - 60 structured formulas with decomposed inputs (metric refs + field refs)
 - 60 temporal mappings (grain, frequency, period for every metric node)
+- Access control classifications for every graph metric (sensitivity tier + access scope)
 - CEL `change_nature` field for revenue quality analysis (Adjusted NRR/GRR)
 - Sources: the canonical [GASP Standard](https://gaspwiki.com) files
 
@@ -63,6 +66,10 @@ Once installed, ask your AI assistant:
 - "How do I calculate CAC Payback?"
 - "What drives ARR?"
 - "How does Customer relate to Subscription?"
+- "What sensitivity tier is CAC classified as?"
+- "What does confidential mean in GASP?"
+- "How does Plan relate to Subscription?"
+- "Which campaigns source leads into the pipeline?"
 - "List all marketing metrics"
 - "What data do I need to implement ARR tracking?"
 - "Search for churn"

package/build/index.js

@@ -158,6 +158,19 @@ server.tool("lookup_metric", "Look up a GASP Standard metric by name or abbrevia
             parts.push(`\n## Adjusted Variant\n\n${sf.adjustedVariant}`);
         }
     }
+    // Access control classification (if available)
+    const acMap = data.ontology?.accessControl?.classifications;
+    if (acMap) {
+        const nodeId = metric.slug.replace(/-/g, '_');
+        const ac = acMap[nodeId]
+            || Object.entries(acMap).find(([k]) => nodeId.startsWith(k + '_'))?.[1];
+        if (ac) {
+            parts.push(`\n## Recommended Access Control\n` +
+                `- **Sensitivity:** ${ac.sensitivityTier} (https://gaspwiki.com/v1/definitions/sensitivity-tier)\n` +
+                `- **Scope:** ${ac.accessScope} (https://gaspwiki.com/v1/definitions/access-scope)\n` +
+                `See https://gaspwiki.com/v1/governance for policy patterns (Cedar, OPA, warehouse RLS).`);
+        }
+    }
     // Swap EOM → GASP branding
     const text = parts.join("\n").replace(/\bEOM Standard\b/g, "GASP Standard");
     return { content: [{ type: "text", text }] };

package/build/loader.js

@@ -118,6 +118,7 @@ export function loadStandard() {
             concepts: ontRaw.concepts || [],
             entityRelationships: ontRaw.entityRelationships || undefined,
             structuredFormulas: ontRaw.structuredFormulas || undefined,
+            accessControl: ontRaw.accessControl || undefined,
         };
     }
     catch {