gemmein.com

Returns the Gemmein build guide (llms.

Returns what changed in each Gemmein release newer than `since` (a Gemmein version, e.

Returns the @gemmein/sdk API reference (REFERENCE.

Searches the Gemmein docs for one term or phrase ('keyed create', 'ifVersion', 'addressed', 'expand') without reading a whole document.

Explains one of the eight collection safety rules (private, shared, admin_write, public_read, community, addressed, direct, app_only): its exact access contract, what it is right for, and the mistakes that leak data.

Explains a GemmeinError code (err.

Checks a collection name against the naming law: lowercase letters, numbers, underscores; starts with a letter; 2-63 characters.

Returns reaffirm.

Validates a relay definition — the contents of gemmein/relays/<name>.

Runs the reaffirm boundary checks live against the caller's own app; returns structured pass/fail (structuredContent: checks, notes, failedCount, passed).

Returns the app this connection is approved for: its name, its Development public key (pk_ — public by design, the key the app's code uses; no secret key is ever returned here), whether it is live, and what going live still waits on, each in plain words.

Returns what the app's Development holds as the gemmein/ file set (path → contents): its name, every collection's declaration, payments.

Does what `npx gemmein sync` does, for an AI app with no terminal: takes the gemmein/ files' contents (path → text) and Gemmein applies them to Development through the same doors and validators — collections, payments, relays, AI tools and aliases, email templates, the app's name.

Creates or updates one collection in Development from its declaration — exactly the JSON of gemmein/collections/<name>.

Sets Development's plans and products from gemmein/payments.

Creates or updates one relay in Development from gemmein/relays/<name>.

Creates or updates one AI tool in Development from gemmein/ai/tools/<name>.

Creates or repoints one model alias in Development (gemmein/ai/aliases.

Saves one email template in Development: name is sign-in (content = sign-in.

Names the app (it titles the customers' sign-in emails).

Makes a test member <name>@<tag>.

Reads the test kit's mailbox: sign-in codes and every email the app sent test members (subject, text, headers, SPF/DKIM/DMARC as Gemmein signs it).

Proves on the server what a chat can't: Gemmein signs in as two of the app's test members (the first two test_member_add made, or the two named; never a real person, and no key passes through the chat) and runs the standard proofs through the app's real doors in Development.

Pays for a plan or product as a test member through the app's real checkout in Stripe's sandbox, with Stripe's published test card (card: visa pays, declined is declined, 3ds asks 3-D Secure) — sandbox keys only, test members only, the test kit's daily caps.

Returns what Stripe's webhook did for a test member: their payments since a moment (ISO time, from test_pay), what each unlocked, their credits.

Gives a test member credits in Development, at once with no approval — the same credits the dashboard gives, on their credit history with the note.

Suspends a test member in Development, at once with no approval — the dashboard's own suspend: they are signed out everywhere and can't sign in; their account, records and payments stay.

Lifts a test member's suspension in Development, at once with no approval — the dashboard's own unsuspend: they can sign in again.

Cancels a test member's subscription in Development, at once with no approval, exactly as Live's would be: a sandbox (Stripe test mode) subscription is set to cancel at the end of the period it paid for — Stripe charges nothing more, and Stripe's webhook ends the plan then; a comped plan ends at once.

Asks the founder to approve one Live action in their browser — go_live, promote, rename_app, add_domain, delete_domain, accept_terms, revoke_server_key, site_promote (target: a Development site version — site_promote asks the same way), site_rebuild_live (target: the version the Live site serves — site_rebuild with env live asks the same way), unpublish_site (target: the version the Live site serves — takes the public Live site offline: its address and the app's own domains show a plain "This site is offline" page, every version and file is kept, the Development preview is untouched; site_rebuild with env live, or site_promote, brings it back); deleting Live's own copy: delete_collection (target: its name — one holding records is deleted only on the dashboard), delete_relay and delete_ai_tool (target: its name) — Development's is deleted at once with dev_delete_collection, dev_delete_relay, dev_delete_ai_tool, and a promote never removes anything from Live; Live's email templates come

Checks the approval request_live_action started; once the founder approved it, carries the action out — once — and answers what happened.

Asks for a secret server key (Development or Live) with exactly the access named — access like "notes:read,orders:read-write" or "all" — and "inbox:read" / "inbox:reply" for an agent that runs support from the app's server.

Reads Development's Logs — stream auth (sign-ins), storage (record writes and refusals), manage (changes made through the dashboard, the CLI or this connection) or server (server-key refusals) — newest first (up to 100): each row's event, when, whether it was allowed, and the refusal's reason.

Reads records of one Development collection, newest first (up to 50) — the app's own test data as it stands while you build, for checking what a write saved.

Reads Development's people (email, when they joined, last seen, suspended, and whether each is a test member — added with test_member_add, or made by a check run).

Reads Development's Errors page: each refusal code with its count, first and last seen, the newest refusal's own sentence, an example Logs row id (dev_logs reads the row), and the page that explains the code (https://docs.

Deletes one collection from Development, with its records — the dashboard's own delete, at once, with no approval (Development is what this connection builds).

Deletes one relay from Development, with its run history — the dashboard's own delete, at once, with no approval: Development's events no longer start it.

Deletes one AI tool from Development — the dashboard's own delete, at once, with no approval: Development's calls to it are refused from then on.

Deletes one of Development's email templates (sign-in, purchase, plan-start, notify, notify-account, notify-event, email-person, inbox-reply) — the dashboard's own delete, at once, with no approval: Development's emails of that kind go back to Gemmein's own design.

Reads a relay's runs in Development (env development, the default) or Live (env live — needs the live:read grant), newest first: each run's id, relay, what triggered it, status (queued, running, done, failed, dead), attempts, the last error, every action's result (ok, its HTTP status, its error, whether it won't be retried), whether it moves money or access, and the shape of what it carried — its keys and the kind of each value, never a value.

Runs one finished relay run (done, failed or dead — its id from relay_runs) again, every action of the relay as it is now; an action that already succeeded finds its own earlier work (a payment's grants are given once, an email isn't sent twice), while an address a call_url action calls is called again.

Says whether Stripe is connected in Development already (and with which kind of key); when it isn't, returns the dashboard link for connecting it and the exact permissions the restricted key needs.

Says whether an AI provider's key is set in Development already, with its last call's result (worked, failed and why, or not called yet) — never the key; when none is set, returns the dashboard link where the founder pastes one (OpenAI, Anthropic, Google, a pipeline's own).

Opens a draft of the app's Development site — its frontend: HTML, CSS, JavaScript, images, fonts, served as static files at https://<slug>-dev.

Puts one file into a site draft (draftId from site_draft): path is relative to the site's root (index.

Publishes a site draft to the Development site (https://<slug>-dev.

Returns the app's site: the Development address (the private preview every publish lands on) and the Live address (public, once a version is put live), the version each serves, whether the Live site is offline, every version (when, by whom, how many files and bytes, its status), how long the Development site has been idle, and each of the app's own domains for the Live site — its status (connecting, live, needs attention) and the one record to add.

Makes an earlier version (its number from site_status) the one the Development address serves, replacing the version it serves now; no version's files are deleted, so a later rollback can return to it.

Asks the founder to approve putting one Development version of the site (its number from site_status) on the public Live site, https://<slug>.

Returns a short-lived link to one version of the site as a zip — the version the Development address serves, the one the Live address serves (env live), or the one named — for the founder's browser.

Returns the site's files from Gemmein's own copy — the same stored files a publish deploys, never fetched from the address.

Makes a link that opens the Development site's private preview on any device for 7 days, with no Gemmein sign-in — for showing the app to someone.

Returns the site's history, newest first: every publish, rollback, promote, unpublish and rebuild, failed attempts too — which side, how (chat, CLI or dashboard), who, when, how long, the outcome (PUBLISHED, FAILED or done), the version, its files and bytes.

Takes the Development site's private preview offline, the way the dashboard's Unpublish does: https://<slug>-dev.

Turns off every share link (site_share_link) and every signed-in preview of the Development site at once, the way the dashboard's "Turn off every preview link" does: anyone holding an old link can't open the preview any more.

Puts the version a site serves up again — the same files, each re-checked against its hash, no new version number — for when the site looks stuck or half-served.

Returns three views of one domain already added to this app (never any other domain): what public DNS shows now — the A, AAAA, CNAME and TXT records at the domain, its www and _gemmein, read from 3 fixed public DNS servers (Cloudflare (1.

Returns, for one domain already added to this app, the one-click link that sets it up at the founder's own DNS provider when that provider offers Gemmein's one-click setup (Domain Connect): the founder opens it, signs in at the provider, sees every record and approves there — Gemmein never holds a login or key for anyone's DNS.

Reads the Live app in one call: people who joined and were active this calendar month against last month, refund-aware revenue this month against last (per currency, minor units), subscribers by plan, errors in the last 24 hours and their codes, what waits on the founder (approvals asked in their browser, unanswered Inbox conversations, refusals on the Errors page), and whether Live is paused.

Reads the Live app's Errors page: each refusal code with its count, first and last seen, the newest refusal's own sentence, an example Logs row id, and the page that explains the code (https://docs.

Reads the Live app's Usage: each meter (API requests, storage writes, sign-in events, stored bytes) against its ceiling this period, the active people the plan's band follows, AI calls, credits used and given, and transactional emails sent (the last 30 days).

The same read as relay_runs with env live, under the name earlier versions used — call relay_runs with env live in new work.

Reads what happened to the Live app's transactional email over the last `days` (1–90, default 30), per template (sign-in, purchase, plan-start, notify, inbox-reply, new-sign-in): sent, bounced, complained (marked as spam) and deferred (the receiving server asked to try later).

Reads the app's support Inbox: conversations, unanswered first — who wrote, the subject, when, whether the founder owes them an answer (up to 50).

Reads the Live app's people (email, when they joined, last seen, suspended).

Reads the Live app's business numbers: people (total, active in 30 days, suspended), subscribers by plan, refund-aware revenue per currency.

Reads the Live app's subscriptions (who, which plan, status, period end).

Reads records of one Live collection, newest first (up to 50).

Reads the Live app's Logs — stream auth, storage, manage or server — newest first (up to 100).

Asks the founder to approve one reply to a customer inside an existing Inbox conversation (threadId from live_inbox): the approval page in their browser shows the exact text and the customer it goes to (a browser approval; no emailed code is asked for a reply); once approved, live_action_status sends it — plain text, to that conversation's customer only (the recipient is the conversation's own, fixed by Gemmein; nothing in the text changes it), from the app's own support address, exactly as the founder's reply from the dashboard (their reply template, threaded under the customer's mail).