@okostream/mcp 0.12.9 → 0.12.10

package/dist/server.js

@@ -70499,6 +70499,13 @@ var OKO_CONNECTION_STATUSES = [
   "connected",
   "not_configured",
   "invalid_key",
+  // 🔴 Next to `invalid_key`, not instead of it (A7, `LR3a-2`). The key is
+  // valid and the account behind it is switched off or blocked — the one state
+  // in which "create a fresh key" is not merely unhelpful but impossible, and
+  // the state in which the platform used to give exactly that advice.
+  // A genuinely revoked key still needs the create-a-key step, so the two
+  // states are separate codes with separate steps.
+  "account_inactive",
   "update_required",
   "rate_limited",
   "unavailable"
@@ -70539,6 +70546,18 @@ function nextSteps(status, minimumVersion, latestVersion) {
           label: "Restart or reconnect the MCP server after updating the key."
         }
       ];
+    case "account_inactive":
+      return [
+        {
+          id: "contact_support",
+          label: "Ask OKO support to restore organizer access for this account: the key is valid, the account is switched off or blocked. Creating another key will not help \u2014 key creation needs an active account too.",
+          url: OKO_ONBOARDING_URLS.website
+        },
+        {
+          id: "restart_client",
+          label: "Restart or reconnect the MCP server once access is restored."
+        }
+      ];
     case "update_required":
       return [
         {
@@ -70566,7 +70585,7 @@ function nextSteps(status, minimumVersion, latestVersion) {
 function buildConnectionStatus(status, options2 = {}) {
   const connected = status === "connected";
   const errorCode = connected ? null : status === "update_required" ? "CLIENT_UPGRADE_REQUIRED" : status === "rate_limited" ? "RATE_LIMITED" : status === "unavailable" ? "SERVICE_UNAVAILABLE" : "AUTH_REQUIRED";
-  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "update_required" ? options2.serverMessage ?? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
+  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "account_inactive" ? options2.serverMessage ?? "The OKO API key is valid, but the organizer account behind it is switched off or blocked." : status === "update_required" ? options2.serverMessage ?? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
   return {
     connected,
     status,
@@ -116272,7 +116291,7 @@ function sanitizeScopes(scopes) {
 }
 
 // build/version.js
-var OKO_MCP_VERSION = "0.12.9";
+var OKO_MCP_VERSION = "0.12.10";
 
 // build/auth.js
 var state = null;
@@ -116345,6 +116364,17 @@ var OkoAuthError = class extends Error {
 function versionField(value) {
   return typeof value === "string" && parseVersion(value) ? value.trim() : void 0;
 }
+function inactiveOrganizerError(body) {
+  const parsed = body && typeof body === "object" ? body : {};
+  if (parsed.error !== "organizer_inactive")
+    return null;
+  const serverMessage = typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
+  return new OkoAuthError("account_inactive", serverMessage ?? "The OKO API key is valid, but the organizer account behind it is switched off or blocked. Creating another key will not help \u2014 contact OKO support to restore access.", { serverMessage });
+}
+function serverRefusalNote(body) {
+  const parsed = body && typeof body === "object" ? body : {};
+  return typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
+}
 function upgradeRequiredError(body) {
   const parsed = body && typeof body === "object" ? body : {};
   const minimumVersion = versionField(parsed.minimumVersion);
@@ -116379,7 +116409,16 @@ async function exchangeApiKey() {
     if (status === 429) {
       throw new OkoAuthError("rate_limited", "OKO API key exchange is temporarily rate-limited. Wait one minute, then restart the MCP client.");
     }
-    throw status === 401 ? new OkoAuthError("invalid_key", "OKO API key is invalid or revoked. Create a fresh key in the OKO MCP install center and replace OKO_API_KEY.") : new OkoAuthError("unavailable", `OKO organizer authentication failed with HTTP ${status}. Check your connection and try again.`);
+    if (status === 401) {
+      const inactive = inactiveOrganizerError(errorBody);
+      if (inactive)
+        throw inactive;
+    }
+    throw status === 401 ? new OkoAuthError("invalid_key", "OKO API key is invalid or revoked. Create a fresh key in the OKO MCP install center and replace OKO_API_KEY.") : new OkoAuthError("unavailable", [
+      `OKO organizer authentication failed with HTTP ${status}.`,
+      serverRefusalNote(errorBody),
+      "Check your connection and try again."
+    ].filter(Boolean).join(" "));
   }
   const data = await response.json();
   if (typeof data.customToken !== "string") {
@@ -116611,17 +116650,19 @@ async function readEventAccess(eventId, uid, mode) {
       return null;
     })
   ]);
-  if (!snap.exists())
-    throw new Error("Event not found.");
-  const data = snap.data();
-  const allowed = grant === null ? legacyEventAllowsMode(data, uid, mode) : data.ownerId === uid || grant.exists() && grantAllowsMode(grant.data(), mode);
-  return { data, allowed };
+  const data = snap.data() ?? {};
+  const holds = (wanted) => grant === null ? legacyEventAllowsMode(data, uid, wanted) : data.ownerId === uid || grant.exists() && grantAllowsMode(grant.data(), wanted);
+  return { data, exists: snap.exists(), visible: holds("read"), allowed: holds(mode) };
 }
 async function eventGrantsMode(eventId, uid, mode) {
   return (await readEventAccess(eventId, uid, mode)).allowed;
 }
+var EVENT_NOT_FOUND_MESSAGE = "Event not found.";
 async function readEvent(eventId, uid, mode = "read") {
-  const { data, allowed } = await readEventAccess(eventId, uid, mode);
+  const { data, exists, visible, allowed } = await readEventAccess(eventId, uid, mode);
+  if (!visible || !exists) {
+    throw new Error(EVENT_NOT_FOUND_MESSAGE);
+  }
   if (!allowed) {
     throw new Error(`Event does not grant ${mode} access to this organizer.`);
   }
@@ -119676,14 +119717,18 @@ function registerLifecycleTools(server2) {
 }
 
 // build/tools/live.js
+var CHAT_LIVE_SETTINGS = ["mode", "slowModeMs", "automodEnabled", "allowViewerLinks"];
 function registerLiveTools(server2) {
   server2.registerTool("oko_get_live_state", {
     title: "Get live state",
     description: toolDescription({
       summary: "Read main RTDB live controls, aggregate analytics, and chat settings for an event.",
       args: ["eventId: event to inspect."],
-      returns: "eventId, agg metrics, ctrl live overrides, and chat settings.",
-      examples: ["Use during a webinar before changing live block visibility or starting/ending sessions."]
+      returns: "eventId, agg metrics, ctrl live overrides, and chat settings (mode, slowModeMs, automodEnabled, allowViewerLinks).",
+      examples: ["Use during a webinar before changing live block visibility or starting/ending sessions."],
+      notes: [
+        "Live state does not carry the event team: to see who has access to an event and with which permissions, use oko_list_workspace_access on the event's workspace."
+      ]
     }),
     inputSchema: { eventId: eventIdField },
     outputSchema: liveStateOutputSchema,
@@ -119691,12 +119736,18 @@ function registerLiveTools(server2) {
   }, async ({ eventId }) => {
     const { uid } = await authed(["analytics:read"]);
     await readEvent(eventId, uid, "analytics");
-    const [aggSnap, ctrlSnap, chatSettingsSnap] = await Promise.all([
+    const [aggSnap, ctrlSnap, ...chatSnaps] = await Promise.all([
       get(ref(rtdb, `events/${eventId}/agg`)),
       get(ref(rtdb, `events/${eventId}/ctrl`)),
-      get(ref(chatRtdb, `settings/${eventId}`))
+      ...CHAT_LIVE_SETTINGS.map((field2) => get(ref(chatRtdb, `settings/${eventId}/${field2}`)))
     ]);
-    return textResult({ eventId, agg: aggSnap.val() ?? {}, ctrl: ctrlSnap.val() ?? {}, chat: chatSettingsSnap.val() ?? {} });
+    const chat = {};
+    CHAT_LIVE_SETTINGS.forEach((field2, index) => {
+      const value = chatSnaps[index]?.val();
+      if (value !== null && value !== void 0)
+        chat[field2] = value;
+    });
+    return textResult({ eventId, agg: aggSnap.val() ?? {}, ctrl: ctrlSnap.val() ?? {}, chat });
   });
   server2.registerTool("oko_set_block_visibility", {
     title: "Set live block visibility",
@@ -120831,7 +120882,11 @@ function registerWorkspaceTools(server2) {
         "workspaceId: workspace owned by the authenticated organizer.",
         "code: optional invite code, 16-64 chars; omitted means generated (recommended).",
         "email: optional intended recipient email.",
-        "permissions: optional whitelist of workspace permission booleans.",
+        // The schema is `workspacePermissionsSchema`: nine booleans, all
+        // required, no extra keys. "optional whitelist" read as "send the
+        // ones you want", and every such call was rejected by validation
+        // before it reached the platform.
+        "permissions: required object of all nine workspace permission booleans (createEvents, editSetup, deleteEvents, controlLive, moderateChat, startSession, viewAnalytics, downloadReports, sendNotifications) \u2014 every key must be present, extra keys are rejected; set false for the ones the invitee should not get.",
         "confirm: must be true."
       ],
       returns: "workspaceId, invite code, inviteUrl, and created=true.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.12.9",
+  "version": "0.12.10",
   "description": "Control OKO Stream webinars from Claude, Codex, and other MCP clients.",
   "license": "UNLICENSED",
   "author": {