@okostream/mcp 0.12.6 → 0.12.8

package/README.md

@@ -82,8 +82,9 @@ published version. The server reports the latest version during the key
 exchange: `oko_whoami` and `oko_connection_status` return `update`, and the
 first results of a session carry an `UPDATE AVAILABLE` block while the client
 is behind, with the exact update step. Global installs update with
-`npm install -g @okostream/mcp@latest`; Claude Desktop users reinstall the
-`.mcpb` bundle from the install center.
+`npm install -g @okostream/mcp@latest`. Claude Desktop is not offered for
+now (the extension bundle is discontinued; the Desktop path returns when the
+package ships through a directory).
 
 ## When a tool refuses
 
@@ -96,6 +97,15 @@ Refusals are explicit and never require guessing:
   OKO team.
 - `PLATFORM_REJECTED_READ` — no access to that resource, or it does not exist.
 
+**One install path.** Every supported client — Claude Code, Codex, and any
+MCP client that takes a command with arguments and env — runs the package
+through `npx -y @okostream/mcp@latest` (Node.js required): the latest version
+is installed on each restart, so the server never falls behind. The `.mcpb`
+extension bundle for Claude Desktop is no longer distributed — it never
+updated itself — and the Claude Desktop path is archived until the package
+ships through a directory. The key exchange refuses versions behind the
+latest published one and tells the assistant how to update.
+
 Image URLs are fetched by the OKO server first, so a VPN, proxy or captive
 portal on the organizer's machine is not in the way. If the server cannot
 reach the URL (a private host, a login wall, a timeout), the MCP client

package/dist/server.js

@@ -70503,7 +70503,7 @@ var OKO_CONNECTION_STATUSES = [
   "rate_limited",
   "unavailable"
 ];
-function nextSteps(status, minimumVersion) {
+function nextSteps(status, minimumVersion, latestVersion) {
   switch (status) {
     case "connected":
       return [{
@@ -70543,7 +70543,7 @@ function nextSteps(status, minimumVersion) {
       return [
         {
           id: "update_package",
-          label: `Update to @okostream/mcp@latest${minimumVersion ? ` (minimum ${minimumVersion})` : ""}.`,
+          label: `Update to @okostream/mcp@latest${latestVersion ? ` (${latestVersion} is published` : ""}${minimumVersion ? `${latestVersion ? "; " : " ("}minimum ${minimumVersion}` : ""}${latestVersion || minimumVersion ? ")" : ""}.`,
           command: "npx -y @okostream/mcp@latest"
         },
         {
@@ -70566,7 +70566,7 @@ function nextSteps(status, minimumVersion) {
 function buildConnectionStatus(status, options2 = {}) {
   const connected = status === "connected";
   const errorCode = connected ? null : status === "update_required" ? "CLIENT_UPGRADE_REQUIRED" : status === "rate_limited" ? "RATE_LIMITED" : status === "unavailable" ? "SERVICE_UNAVAILABLE" : "AUTH_REQUIRED";
-  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "update_required" ? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
+  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "update_required" ? options2.serverMessage ?? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
   return {
     connected,
     status,
@@ -70576,8 +70576,9 @@ function buildConnectionStatus(status, options2 = {}) {
     organizerAccountRequired: true,
     credentialConfigured: status !== "not_configured",
     links: OKO_ONBOARDING_URLS,
-    nextSteps: nextSteps(status, options2.minimumVersion),
+    nextSteps: nextSteps(status, options2.minimumVersion, options2.latestVersion),
     ...options2.minimumVersion ? { minimumVersion: options2.minimumVersion } : {},
+    ...options2.latestVersion ? { latestVersion: options2.latestVersion } : {},
     ...options2.uid ? { uid: options2.uid } : {},
     ...options2.scopes ? { scopes: options2.scopes } : {},
     ...options2.update ? { update: options2.update } : {}
@@ -116223,11 +116224,14 @@ function sanitizeScopes(scopes) {
 }
 
 // build/version.js
-var OKO_MCP_VERSION = "0.12.6";
+var OKO_MCP_VERSION = "0.12.8";
 
 // build/auth.js
 var state = null;
 var latestPublishedVersion = null;
+function recordLatestPublishedVersion(version9) {
+  latestPublishedVersion = version9 && parseVersion(version9) ? version9.trim() : null;
+}
 var OkoScopeError = class extends Error {
   scope;
   constructor(scope) {
@@ -116258,7 +116262,7 @@ function isNewerVersion(candidate, current) {
 var MCP_UPDATE_HOW_TO = [
   "Restart the MCP client. With the default `npx -y @okostream/mcp@latest` command the restart installs the newest version automatically.",
   "Global install: run `npm install -g @okostream/mcp@latest`, then restart the client.",
-  "Claude Desktop with the .mcpb bundle: download https://okostream.app/downloads/oko-mcp-latest.mcpb and install it over the current one."
+  'Claude Desktop with the extension bundle: the bundle is discontinued and never updated itself; switch to Claude Code, Codex, or the "Other MCP" configuration from https://okostream.app/app/mcp.'
 ];
 function updateStatus() {
   const latest = latestPublishedVersion;
@@ -116279,13 +116283,28 @@ function currentUid() {
 var OkoAuthError = class extends Error {
   status;
   minimumVersion;
-  constructor(status, message, minimumVersion) {
+  latestVersion;
+  serverMessage;
+  constructor(status, message, details = {}) {
     super(message);
     this.status = status;
-    this.minimumVersion = minimumVersion;
     this.name = "OkoAuthError";
+    this.minimumVersion = details.minimumVersion;
+    this.latestVersion = details.latestVersion;
+    this.serverMessage = details.serverMessage;
   }
 };
+function versionField(value) {
+  return typeof value === "string" && parseVersion(value) ? value.trim() : void 0;
+}
+function upgradeRequiredError(body) {
+  const parsed = body && typeof body === "object" ? body : {};
+  const minimumVersion = versionField(parsed.minimumVersion);
+  const latestVersion = versionField(parsed.latestVersion);
+  const serverMessage = typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
+  const fallback = `OKO MCP ${OKO_MCP_VERSION} is no longer supported. Update to @okostream/mcp@latest (minimum ${minimumVersion ?? "the current release"}${latestVersion ? `, latest ${latestVersion}` : ""}) and restart the MCP client.`;
+  return new OkoAuthError("update_required", serverMessage ?? fallback, { minimumVersion, latestVersion, serverMessage });
+}
 async function exchangeApiKey() {
   if (!env.apiKey) {
     throw new OkoAuthError("not_configured", "OKO MCP is installed but not connected. Configure OKO_API_KEY, then restart or reconnect the MCP server.");
@@ -116304,8 +116323,10 @@ async function exchangeApiKey() {
     const status = response.status;
     const errorBody = await response.json().catch(() => ({}));
     if (status === 426) {
-      const minimumVersion = typeof errorBody.minimumVersion === "string" ? errorBody.minimumVersion : "the current release";
-      throw new OkoAuthError("update_required", `OKO MCP ${OKO_MCP_VERSION} is no longer supported. Update to @okostream/mcp@latest (minimum ${minimumVersion}) and restart the MCP client.`, minimumVersion);
+      const error3 = upgradeRequiredError(errorBody);
+      if (error3.latestVersion)
+        recordLatestPublishedVersion(error3.latestVersion);
+      throw error3;
     }
     if (status === 429) {
       throw new OkoAuthError("rate_limited", "OKO API key exchange is temporarily rate-limited. Wait one minute, then restart the MCP client.");
@@ -116327,29 +116348,40 @@ async function exchangeApiKey() {
     latestVersion: typeof data.latestVersion === "string" && parseVersion(data.latestVersion) ? data.latestVersion.trim() : null
   };
 }
-async function ensureAuth(requiredScopes = []) {
+function singleFlight(run) {
+  let inFlight = null;
+  return () => {
+    inFlight ??= run().finally(() => {
+      inFlight = null;
+    });
+    return inFlight;
+  };
+}
+var refreshSession = singleFlight(async () => {
   const now = Date.now();
-  if (!state || now > state.expiresAt - 5 * 60 * 1e3 || !auth.currentUser) {
-    const exchanged = await exchangeApiKey();
-    try {
-      await signInWithCustomToken(auth, exchanged.customToken);
-    } catch {
-      throw new OkoAuthError("unavailable", "OKO MCP received an organizer session but could not initialize it. Reconnect and try again.");
-    }
-    state = {
-      uid: exchanged.organizerUid,
-      scopes: exchanged.scopes,
-      expiresAt: now + exchanged.expiresIn * 1e3
-    };
-    if (exchanged.latestVersion)
-      latestPublishedVersion = exchanged.latestVersion;
+  const exchanged = await exchangeApiKey();
+  try {
+    await signInWithCustomToken(auth, exchanged.customToken);
+  } catch {
+    throw new OkoAuthError("unavailable", "OKO MCP received an organizer session but could not initialize it. Reconnect and try again.");
   }
+  state = {
+    uid: exchanged.organizerUid,
+    scopes: exchanged.scopes,
+    expiresAt: now + exchanged.expiresIn * 1e3
+  };
+  if (exchanged.latestVersion)
+    recordLatestPublishedVersion(exchanged.latestVersion);
+  return state;
+});
+async function ensureAuth(requiredScopes = []) {
+  const current = state && Date.now() <= state.expiresAt - 5 * 60 * 1e3 && auth.currentUser ? state : await refreshSession();
   for (const scope of requiredScopes) {
-    if (!state.scopes.includes(scope)) {
+    if (!current.scopes.includes(scope)) {
       throw new OkoScopeError(scope);
     }
   }
-  return state;
+  return current;
 }
 function currentScopes() {
   return state?.scopes ?? [];
@@ -116366,16 +116398,21 @@ async function getConnectionStatus() {
     });
   } catch (error3) {
     if (error3 instanceof OkoAuthError) {
-      return buildConnectionStatus(error3.status, { minimumVersion: error3.minimumVersion });
+      return buildConnectionStatus(error3.status, authErrorOptions(error3));
     }
     return buildConnectionStatus("unavailable");
   }
 }
+function authErrorOptions(error3) {
+  return {
+    minimumVersion: error3.minimumVersion,
+    latestVersion: error3.latestVersion,
+    serverMessage: error3.serverMessage
+  };
+}
 function authErrorResult(error3) {
   return {
-    ...textResult(buildConnectionStatus(error3.status, {
-      minimumVersion: error3.minimumVersion
-    })),
+    ...textResult(buildConnectionStatus(error3.status, authErrorOptions(error3))),
     isError: true
   };
 }
@@ -116639,6 +116676,27 @@ async function responseBufferWithLimit(response, maxBytes) {
   }
   return Buffer.concat(chunks, total);
 }
+function shareLinkHint(url) {
+  let host = "";
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return "";
+  }
+  if (host === "drive.google.com" || host === "docs.google.com") {
+    return " This is a Google Drive page, not the file: share it as 'anyone with the link' and use https://drive.google.com/uc?export=download&id=<fileId>, or download the file and pass source.path.";
+  }
+  if (host.endsWith("disk.yandex.ru") || host.endsWith("disk.yandex.com") || host === "yadi.sk" || host.endsWith("disk.360.yandex.ru")) {
+    return " This is a Yandex Disk page, not the file: use the direct download link from the page (\u0421\u043A\u0430\u0447\u0430\u0442\u044C \u2192 copy link), or download the file and pass source.path.";
+  }
+  if (host === "dropbox.com" || host.endsWith(".dropbox.com")) {
+    return " This is a Dropbox page: replace ?dl=0 with ?dl=1 in the link, or download the file and pass source.path.";
+  }
+  if (host.endsWith("onedrive.live.com") || host === "1drv.ms" || host.endsWith("sharepoint.com")) {
+    return " This is a OneDrive page: use its direct download link, or download the file and pass source.path.";
+  }
+  return " Use a direct link to the image file (right-click the image \u2192 copy image address), or download the file and pass source.path.";
+}
 async function readRemoteImage(rawUrl, redirects = 0) {
   if (redirects > REMOTE_IMAGE_MAX_REDIRECTS) {
     throw new Error("Image URL has too many redirects.");
@@ -116671,7 +116729,7 @@ async function readRemoteImage(rawUrl, redirects = 0) {
     }
     const contentType = (response.headers.get("content-type") ?? "").split(";")[0]?.trim().toLowerCase();
     if (!contentType || !contentType.startsWith("image/")) {
-      throw new Error("Image URL must return Content-Type image/*.");
+      throw new Error(`Image URL must return Content-Type image/* (got ${contentType || "none"}).${shareLinkHint(rawUrl)}`);
     }
     if (!ALLOWED_REMOTE_IMAGE_TYPES.has(contentType)) {
       throw new Error(`Image URL Content-Type ${contentType} is not supported. Use JPEG, PNG, WEBP, GIF, or AVIF.`);
@@ -116734,6 +116792,12 @@ function serverFetchRefusal(error3) {
   if (code === "functions/invalid-argument" && message.includes("Image payload is empty or too large")) {
     return { reason: "server_without_url_support", message: "The OKO server release in use does not fetch URLs yet." };
   }
+  if (code === "functions/deadline-exceeded") {
+    return { reason: "server_timeout", message: "The OKO server did not finish fetching the URL within its time limit." };
+  }
+  if (code === "functions/internal") {
+    return { reason: "server_error", message: message && message !== "internal" ? message : "The OKO server failed while fetching the URL." };
+  }
   return null;
 }
 var SERVER_FETCH_NOTE = "Image fetched by the OKO server directly from the URL; this machine's network was not involved.";
@@ -118332,7 +118396,10 @@ function registerEventTools(server2) {
       summary: "Read one OKO event visible to the organizer.",
       args: ["eventId: OKO event document id."],
       returns: "full event document fields plus id and public event URL.",
-      examples: ["Use after oko_create_webinar to verify setup and return the event URL to the user."]
+      examples: ["Use after oko_create_webinar to verify setup and return the event URL to the user."],
+      notes: [
+        "blocks.chat.mode is a legacy field written by older cabinet versions and read by nothing; chat visibility is blocks.chat.visibility (always | hidden). Ignore mode."
+      ]
     }),
     inputSchema: { eventId: eventIdField },
     outputSchema: eventOutputSchema,
@@ -119052,26 +119119,28 @@ function platformRejectionResult(toolName, args, readOnly) {
     isError: true
   };
 }
-var UPDATE_NOTICE_LIMIT = 3;
+var UPDATE_NOTICE_FULL_LIMIT = 3;
 var updateNoticesShown = 0;
+function updateNoticeText(status, shownSoFar) {
+  if (shownSoFar < UPDATE_NOTICE_FULL_LIMIT) {
+    return `UPDATE AVAILABLE: ${status.message} How to update: ${(status.howTo ?? []).join(" ")}`;
+  }
+  return `UPDATE AVAILABLE: OKO MCP ${status.current} \u2192 ${status.latest}. Restart the MCP client to install it (npx does it automatically); see oko_connection_status for the steps.`;
+}
 function withUpdateNotice(result) {
-  if (updateNoticesShown >= UPDATE_NOTICE_LIMIT)
-    return result;
   const status = updateStatus();
   if (!status.updateAvailable || !result || typeof result !== "object")
     return result;
   const typed = result;
   if (!Array.isArray(typed.content))
     return result;
+  const text = updateNoticeText(status, updateNoticesShown);
   updateNoticesShown += 1;
   return {
     ...typed,
     content: [
       ...typed.content,
-      {
-        type: "text",
-        text: `UPDATE AVAILABLE: ${status.message} How to update: ${(status.howTo ?? []).join(" ")}`
-      }
+      { type: "text", text }
     ]
   };
 }
@@ -120446,7 +120515,7 @@ function registerWorkspaceTools(server2) {
     description: toolDescription({
       summary: "Accept a workspace invite code for the authenticated organizer.",
       args: ["code: invite code from /invite/{code}.", "confirm: must be true."],
-      returns: "success plus workspace id/name returned by OKO CF19.",
+      returns: "success, workspace id/name, and keptExistingPermissions: true when the organizer was already a member \u2014 an invite never changes existing permissions; the owner changes them with oko_update_workspace_member.",
       examples: ["Use when the organizer wants to join a workspace from an invite code."]
     }),
     inputSchema: {
@@ -120455,6 +120524,7 @@ function registerWorkspaceTools(server2) {
     },
     outputSchema: external_exports.object({
       success: external_exports.boolean(),
+      keptExistingPermissions: external_exports.boolean().optional(),
       workspace: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).passthrough()
     }).passthrough(),
     annotations: writeTool

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.12.6",
+  "version": "0.12.8",
   "description": "Control OKO Stream webinars from Claude, Codex, and other MCP clients.",
   "license": "UNLICENSED",
   "author": {