Changelog

What shipped

Dated, in plain English, most recent first. If it's written here, it is live — nothing on this page is a roadmap.

Last updated: 29 July 2026

29 Jul 2026Sealed file delivery

A file's URL is no longer proof of access. Private files now resolve through short-lived signed links, checked against your rules on every request.

Files in collections a stranger can read keep permanent public URLs, byte-identical to before.
Files in every other collection live in a sealed keyspace: g.files.link(ref) asks your collection's rule first, then returns a link that expires in minutes.
Revoking access (a refund, a rule, a revoked grant) stops new links immediately; an already-issued link dies at its expiry.
Breaking change: upload() now returns a ref, not a url. Store the ref; call g.files.link(ref) when you need a URL.
Every link minted is written to the audit record — who was handed what, and when.

Payment now means something the engine enforces: buying grants access, refunding revokes it.

Collections can require an entitlement: requires: "access:pro" gates any rule, on every operation, with no code written by you.
Paid checkouts and subscriptions create grants automatically; a full refund revokes exactly the grants it created and nothing else.
Owners can grant and revoke access by hand from the console — trials, comps, support fixes — without touching revenue records.
Buyers keep proof of purchase via g.purchases.mine(), whether or not the app keeps a receipts collection.
A signed-in customer without access gets 403 entitlement_required naming the missing key, so your app can show an upgrade screen instead of a dead end.

The command line got safer for the way people actually run it — through coding agents.

npx -y gemmein init in a non-interactive shell now hands off cleanly to a human instead of crashing — the three setup questions are business decisions, not your AI's.
Every command that needs a project answers consistently; local shape learning fixed so gemmein go-live can verify what you built.

Build and rehearse everything on your machine, free; pricing became two simple states.

npx gemmein runs the real production engine locally — same rules, same refusals, no account needed, state in one file.
Pricing: free while you build; Live from $50/month when real customers arrive. No card at signup, ever.
gemmein feedback sends a note straight to the founder.

The teaching surface for humans and their AIs.

docs.gemmein.com went live — the full builder guide, error tables, and llms.txt.
@gemmein/mcp published: your coding agent can read Gemmein's rules, shapes, and teaching directly.

The platform, the dashboard, and the SDK went public.

Passwordless sign-in, seven storage rules, file uploads, and Stripe-backed subscriptions — live in production.
@gemmein/sdk published to npm; the dashboard opened for signups at app.gemmein.com.