mcp-google-multi 6.0.0-beta.5 → 6.0.1-alpha.1

package/dist/http-config.d.ts

@@ -28,8 +28,9 @@ export declare function transportIncludesHttp(t: Transport): boolean;
 export declare function resolveTransport(env?: NodeJS.ProcessEnv): Transport;
 /**
  * Canonicalize a public base URL. WHATWG `URL` already lowercases the
- * scheme+host and omits a default port from `.host`; this adds the HTTPS-only
- * scheme check, strips fragment/query/userinfo, and removes a trailing slash.
+ * scheme+host and omits a default port from `.host`; this restricts the scheme
+ * to http(s), strips fragment/query/userinfo, and removes a trailing slash.
+ * `http:` stays accepted for a loopback single-owner setup (docs/internals.md).
  */
 export declare function canonicalizePublicUrl(raw: string): string;
 export declare function resolveHttpConfig(env?: NodeJS.ProcessEnv): HttpConfig;

package/dist/http-config.js

@@ -27,8 +27,9 @@ export function resolveTransport(env = process.env) {
 }
 /**
  * Canonicalize a public base URL. WHATWG `URL` already lowercases the
- * scheme+host and omits a default port from `.host`; this adds the HTTPS-only
- * scheme check, strips fragment/query/userinfo, and removes a trailing slash.
+ * scheme+host and omits a default port from `.host`; this restricts the scheme
+ * to http(s), strips fragment/query/userinfo, and removes a trailing slash.
+ * `http:` stays accepted for a loopback single-owner setup (docs/internals.md).
  */
 export function canonicalizePublicUrl(raw) {
     let u;

package/dist/write-control.js

@@ -143,6 +143,18 @@ export function denyReason(tool, policy) {
     }
     return { rule: 'profile', profile: policy.profile };
 }
+const CUD_CLASSES = ['read', 'create', 'update', 'delete'];
+// The allow-list vocabulary is service:cud or service:op, never the tool
+// name, so suggesting the name would hand back a pattern that never matches.
+function allowSuggestion(tool) {
+    const op = opOf(tool);
+    const pattern = `${tool.service}:${op}`;
+    // An op spelled like a cud class (drive_update) is also that class's pattern.
+    if (CUD_CLASSES.includes(op)) {
+        return `allow it with GOOGLE_WRITE_ALLOW="${pattern}", which also allows every other ${op}-class ${tool.service} tool`;
+    }
+    return `allow just this one with GOOGLE_WRITE_ALLOW="${pattern}"`;
+}
 function denyHint(tool, reason) {
     if (reason.rule === 'read_only') {
         return 'GOOGLE_READ_ONLY=true refuses every write, ahead of the profile and the allow-list, so neither of those can enable this. Unset GOOGLE_READ_ONLY to allow writes.';
@@ -154,15 +166,13 @@ function denyHint(tool, reason) {
         const what = reason.kind === 'push_registration'
             ? 'registers a push channel, which sends this account\'s activity to an external URL'
             : 'needs a scope that acts on the whole organization, on legal holds, on billing, or on deployed code';
-        return `"${tool.name}" ${what}, so "${reason.profile}" refuses it whatever its verb. Use GOOGLE_PROFILE=full-writes, or allow just this one with GOOGLE_WRITE_ALLOW="${tool.service}:${opOf(tool)}".`;
+        return `"${tool.name}" ${what}, so "${reason.profile}" refuses it whatever its verb. Use GOOGLE_PROFILE=full-writes, or ${allowSuggestion(tool)}.`;
     }
     const usable = profilesAllowing(tool).filter((p) => p !== reason.profile);
     const profiles = usable.length > 0
         ? `Use GOOGLE_PROFILE=${usable.join(' or ')}`
         : 'No profile permits this operation';
-    // The allow-list vocabulary is service:cud or service:op, never the tool
-    // name, so suggesting the name would hand back a pattern that never matches.
-    return `Profile "${reason.profile}" does not permit ${tool.cud}. ${profiles}, or allow just this one with GOOGLE_WRITE_ALLOW="${tool.service}:${opOf(tool)}".`;
+    return `Profile "${reason.profile}" does not permit ${tool.cud}. ${profiles}, or ${allowSuggestion(tool)}.`;
 }
 export function writeDisabledResult(tool, policy, account) {
     // Recomputed rather than passed in: every call site has already run

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "6.0.0-beta.5",
+  "version": "6.0.1-alpha.1",
   "mcpName": "io.github.bakissation/mcp-google-multi",
   "description": "Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.",
   "type": "module",