Enable opt-in Google Workspace accounts for maintainers

Adds a google config with provisionUser to the MAINTAINERS role. Runtime
provisioning already gates on firstName/lastName/googleEmailPrefix, so
maintainers opt in by sending a PR adding those fields to their entry in
users.ts. Missing fields means no account is created.

Relaxes the validator and tests to treat missing GWS fields as implicit
opt-out rather than a hard error, so existing maintainers do not need
skipGoogleUserProvisioning set up front.

Also documents the opt-in flow in the README.
This commit is contained in:
David Soria Parra 2026-03-07 22:44:59 +00:00
commit 9ecc452da6
No known key found for this signature in database

View file

@ -102,7 +102,9 @@ export const ROLES: readonly Role[] = [
id: ROLE_IDS.MAINTAINERS,
description: 'General maintainers',
discord: { role: 'maintainers (synced)' },
// Discord only - general maintainer role
// GWS user accounts are opt-in: maintainers add firstName/lastName/googleEmailPrefix
// to their entry in users.ts via PR to get an @modelcontextprotocol.io account
google: { group: 'maintainers', provisionUser: true },
},
{
id: ROLE_IDS.DOCS_MAINTAINERS,