@okostream/mcp 0.12.9 → 0.12.11

package/dist/server.js

@@ -70499,6 +70499,13 @@ var OKO_CONNECTION_STATUSES = [
   "connected",
   "not_configured",
   "invalid_key",
+  // 🔴 Next to `invalid_key`, not instead of it (A7, `LR3a-2`). The key is
+  // valid and the account behind it is switched off or blocked — the one state
+  // in which "create a fresh key" is not merely unhelpful but impossible, and
+  // the state in which the platform used to give exactly that advice.
+  // A genuinely revoked key still needs the create-a-key step, so the two
+  // states are separate codes with separate steps.
+  "account_inactive",
   "update_required",
   "rate_limited",
   "unavailable"
@@ -70539,6 +70546,18 @@ function nextSteps(status, minimumVersion, latestVersion) {
           label: "Restart or reconnect the MCP server after updating the key."
         }
       ];
+    case "account_inactive":
+      return [
+        {
+          id: "contact_support",
+          label: "Ask OKO support to restore organizer access for this account: the key is valid, the account is switched off or blocked. Creating another key will not help \u2014 key creation needs an active account too.",
+          url: OKO_ONBOARDING_URLS.website
+        },
+        {
+          id: "restart_client",
+          label: "Restart or reconnect the MCP server once access is restored."
+        }
+      ];
     case "update_required":
       return [
         {
@@ -70566,7 +70585,7 @@ function nextSteps(status, minimumVersion, latestVersion) {
 function buildConnectionStatus(status, options2 = {}) {
   const connected = status === "connected";
   const errorCode = connected ? null : status === "update_required" ? "CLIENT_UPGRADE_REQUIRED" : status === "rate_limited" ? "RATE_LIMITED" : status === "unavailable" ? "SERVICE_UNAVAILABLE" : "AUTH_REQUIRED";
-  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "update_required" ? options2.serverMessage ?? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
+  const message = connected ? "OKO MCP is connected to an active organizer account." : status === "not_configured" ? "OKO MCP is installed, but OKO_API_KEY is not configured." : status === "invalid_key" ? "OKO MCP is installed, but the configured API key is invalid or revoked." : status === "account_inactive" ? options2.serverMessage ?? "The OKO API key is valid, but the organizer account behind it is switched off or blocked." : status === "update_required" ? options2.serverMessage ?? "This OKO MCP client version is no longer supported." : status === "rate_limited" ? "OKO temporarily rate-limited the connection attempt." : "OKO MCP could not verify the organizer connection.";
   return {
     connected,
     status,
@@ -116272,7 +116291,7 @@ function sanitizeScopes(scopes) {
 }
 
 // build/version.js
-var OKO_MCP_VERSION = "0.12.9";
+var OKO_MCP_VERSION = "0.12.11";
 
 // build/auth.js
 var state = null;
@@ -116345,6 +116364,17 @@ var OkoAuthError = class extends Error {
 function versionField(value) {
   return typeof value === "string" && parseVersion(value) ? value.trim() : void 0;
 }
+function inactiveOrganizerError(body) {
+  const parsed = body && typeof body === "object" ? body : {};
+  if (parsed.error !== "organizer_inactive")
+    return null;
+  const serverMessage = typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
+  return new OkoAuthError("account_inactive", serverMessage ?? "The OKO API key is valid, but the organizer account behind it is switched off or blocked. Creating another key will not help \u2014 contact OKO support to restore access.", { serverMessage });
+}
+function serverRefusalNote(body) {
+  const parsed = body && typeof body === "object" ? body : {};
+  return typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
+}
 function upgradeRequiredError(body) {
   const parsed = body && typeof body === "object" ? body : {};
   const minimumVersion = versionField(parsed.minimumVersion);
@@ -116379,7 +116409,16 @@ async function exchangeApiKey() {
     if (status === 429) {
       throw new OkoAuthError("rate_limited", "OKO API key exchange is temporarily rate-limited. Wait one minute, then restart the MCP client.");
     }
-    throw status === 401 ? new OkoAuthError("invalid_key", "OKO API key is invalid or revoked. Create a fresh key in the OKO MCP install center and replace OKO_API_KEY.") : new OkoAuthError("unavailable", `OKO organizer authentication failed with HTTP ${status}. Check your connection and try again.`);
+    if (status === 401) {
+      const inactive = inactiveOrganizerError(errorBody);
+      if (inactive)
+        throw inactive;
+    }
+    throw status === 401 ? new OkoAuthError("invalid_key", "OKO API key is invalid or revoked. Create a fresh key in the OKO MCP install center and replace OKO_API_KEY.") : new OkoAuthError("unavailable", [
+      `OKO organizer authentication failed with HTTP ${status}.`,
+      serverRefusalNote(errorBody),
+      "Check your connection and try again."
+    ].filter(Boolean).join(" "));
   }
   const data = await response.json();
   if (typeof data.customToken !== "string") {
@@ -116611,17 +116650,19 @@ async function readEventAccess(eventId, uid, mode) {
       return null;
     })
   ]);
-  if (!snap.exists())
-    throw new Error("Event not found.");
-  const data = snap.data();
-  const allowed = grant === null ? legacyEventAllowsMode(data, uid, mode) : data.ownerId === uid || grant.exists() && grantAllowsMode(grant.data(), mode);
-  return { data, allowed };
+  const data = snap.data() ?? {};
+  const holds = (wanted) => grant === null ? legacyEventAllowsMode(data, uid, wanted) : data.ownerId === uid || grant.exists() && grantAllowsMode(grant.data(), wanted);
+  return { data, exists: snap.exists(), visible: holds("read"), allowed: holds(mode) };
 }
 async function eventGrantsMode(eventId, uid, mode) {
   return (await readEventAccess(eventId, uid, mode)).allowed;
 }
+var EVENT_NOT_FOUND_MESSAGE = "Event not found.";
 async function readEvent(eventId, uid, mode = "read") {
-  const { data, allowed } = await readEventAccess(eventId, uid, mode);
+  const { data, exists, visible, allowed } = await readEventAccess(eventId, uid, mode);
+  if (!visible || !exists) {
+    throw new Error(EVENT_NOT_FOUND_MESSAGE);
+  }
   if (!allowed) {
     throw new Error(`Event does not grant ${mode} access to this organizer.`);
   }
@@ -117154,16 +117195,43 @@ async function updateCardImageInTransaction(eventId, cardId, patch) {
     });
   });
 }
-async function writeEventPatchWithCards(eventId, basePatch, buildItems) {
+function descendPath(root, segments) {
+  let current = root;
+  for (const segment of segments) {
+    if (current === null || typeof current !== "object")
+      return void 0;
+    current = current[segment];
+  }
+  return current;
+}
+function valueAfterPatch(fresh, patch, path) {
+  if (Object.prototype.hasOwnProperty.call(patch, path))
+    return patch[path];
+  const segments = path.split(".");
+  for (let cut = segments.length - 1; cut > 0; cut--) {
+    const ancestor = segments.slice(0, cut).join(".");
+    if (!Object.prototype.hasOwnProperty.call(patch, ancestor))
+      continue;
+    return descendPath(patch[ancestor], segments.slice(cut));
+  }
+  return descendPath(fresh, segments);
+}
+function scheduleMissesDate(sessionMode, eventDate) {
+  return sessionMode === "schedule" && !eventDate;
+}
+async function writeEventPatchWithCards(eventId, basePatch, buildItems, validate = null) {
   const eventRef = doc(firestore, "events", eventId);
   await runTransaction2(firestore, async (transaction) => {
     const snap = await transaction.get(eventRef);
     if (!snap.exists())
       throw new Error("Event not found.");
+    const fresh = snap.data();
     const patch = { ...basePatch };
     if (buildItems) {
-      patch["blocks.cards.items"] = buildItems(snap.data());
+      patch["blocks.cards.items"] = buildItems(fresh);
     }
+    if (validate)
+      validate(fresh, patch);
     if (Object.keys(patch).length === 0)
       return;
     transaction.update(eventRef, patch);
@@ -118384,6 +118452,9 @@ function validateEventSetup(eventId, event) {
   } else if (eventDateMs < Date.now() - 60 * 60 * 1e3) {
     add(warnings, "date_in_past", "meta.eventDate", "Configured webinar date appears to be in the past.");
   }
+  if (scheduleMissesDate(event.analyticsSessionMode, meta2.eventDate)) {
+    add(errors, "schedule_missing_date", "analyticsSessionMode", "Session mode is 'schedule' but meta.eventDate is empty, so OKO can never start or end the session automatically and the reminder is never sent. Set eventDate, or switch sessionMode to 'manual' \u2014 oko_update_event accepts both fields in one call.");
+  }
   const duplicateFormIds = /* @__PURE__ */ new Set();
   const seenFormIds = /* @__PURE__ */ new Set();
   forms.forEach((form, index) => {
@@ -118499,6 +118570,24 @@ function telegramBlocksPatch(args) {
     "telegram.channelIds": args.telegramChannelIds
   };
 }
+function assertScheduleHasDate(fresh, patch) {
+  const missing = scheduleMissesDate(valueAfterPatch(fresh, patch, "analyticsSessionMode"), valueAfterPatch(fresh, patch, "meta.eventDate"));
+  if (!missing)
+    return;
+  throw new Error("sessionMode 'schedule' requires meta.eventDate: without a date OKO can never start the session automatically. Set eventDate in the same call, or switch sessionMode to 'manual' in the same call to clear the date.");
+}
+function assertFormBindingsExist(fresh, patch) {
+  const formsAfterPatch = valueAfterPatch(fresh, patch, "forms");
+  const knownFormIds = new Set((Array.isArray(formsAfterPatch) ? formsAfterPatch : []).map((form) => typeof form?.id === "string" ? form.id : null).filter((id) => Boolean(id)));
+  for (const field2 of ["blocks.promoBanner.formId", "blocks.primaryCta.formId"]) {
+    if (!Object.prototype.hasOwnProperty.call(patch, field2))
+      continue;
+    const value = patch[field2];
+    if (typeof value === "string" && value && !knownFormIds.has(value)) {
+      throw new Error(`${field2}: form "${value}" not found in event.forms. Create the form in the same call (or beforehand) \u2014 a button bound to a missing form does nothing for viewers.`);
+    }
+  }
+}
 function configureBlocksScopes(args) {
   return Object.keys(telegramBlocksPatch(args)).length > 0 ? ["setup:write", "telegram:write"] : ["setup:write"];
 }
@@ -118678,7 +118767,8 @@ function registerEventTools(server2) {
       returns: "event id and the list of Firestore fields updated.",
       examples: ["Use for title/date/speaker/video edits; use oko_configure_blocks for blocks and forms."],
       notes: [
-        "sessionMode 'schedule' makes OKO start and end the analytics session automatically at eventDate for durationMinutes; 'manual' keeps the Start/End buttons and a Telegram reminder 10 minutes before eventDate. This is still an analytics session, not an event status."
+        "sessionMode 'schedule' makes OKO start and end the analytics session automatically at eventDate for durationMinutes; 'manual' keeps the Start/End buttons and a Telegram reminder 10 minutes before eventDate. This is still an analytics session, not an event status.",
+        "sessionMode 'schedule' and eventDate travel together: setting the mode without a date, or clearing the date while the mode stays, is refused. Change both in one call."
       ]
     }),
     inputSchema: {
@@ -118704,13 +118794,7 @@ function registerEventTools(server2) {
     if (requiredScopes.size === 0)
       throw new Error("Provide at least one field to update.");
     const { uid } = await authed([...requiredScopes]);
-    const current = await readEvent(args.eventId, uid, "edit");
-    if (args.sessionMode === "schedule") {
-      const dateAfterPatch = args.eventDate !== void 0 ? args.eventDate : current.meta?.eventDate ?? null;
-      if (!dateAfterPatch) {
-        throw new Error("sessionMode 'schedule' requires meta.eventDate: without a date OKO can never start the session automatically. Set eventDate in the same call, or keep sessionMode 'manual'.");
-      }
-    }
+    await readEvent(args.eventId, uid, "edit");
     const patch = {};
     if (args.title !== void 0)
       patch.title = args.title.trim();
@@ -118735,7 +118819,7 @@ function registerEventTools(server2) {
       patch.analyticsSessionMode = args.sessionMode;
     if (args.durationMinutes !== void 0)
       patch["meta.durationMinutes"] = args.durationMinutes;
-    await updateDoc(doc(firestore, "events", args.eventId), patch);
+    await writeEventPatchWithCards(args.eventId, patch, null, assertScheduleHasDate);
     return textResult({ id: args.eventId, updated: Object.keys(patch) });
   });
   server2.registerTool("oko_configure_blocks", {
@@ -118833,17 +118917,7 @@ function registerEventTools(server2) {
         }))
       }));
     Object.assign(patch, telegramPatch);
-    const formsAfterPatch = patch.forms ?? current.forms;
-    const knownFormIds = new Set((Array.isArray(formsAfterPatch) ? formsAfterPatch : []).map((form) => typeof form?.id === "string" ? form.id : null).filter((id) => Boolean(id)));
-    for (const [field2, value] of [
-      ["blocks.promoBanner.formId", patch["blocks.promoBanner.formId"]],
-      ["blocks.primaryCta.formId", patch["blocks.primaryCta.formId"]]
-    ]) {
-      if (typeof value === "string" && value && !knownFormIds.has(value)) {
-        throw new Error(`${field2}: form "${value}" not found in event.forms. Create the form in the same call (or beforehand) \u2014 a button bound to a missing form does nothing for viewers.`);
-      }
-    }
-    await updateDoc(doc(firestore, "events", args.eventId), patch);
+    await writeEventPatchWithCards(args.eventId, patch, null, assertFormBindingsExist);
     const hints = [];
     if (args.chat?.visibility !== void 0) {
       hints.push("blocks.chat.visibility was stored but the event page does not read it: the chat panel exists exactly when blocks.chat.enabled is true, and sending is opened or closed live with oko_set_chat_mode. Drop the field.");
@@ -119676,14 +119750,18 @@ function registerLifecycleTools(server2) {
 }
 
 // build/tools/live.js
+var CHAT_LIVE_SETTINGS = ["mode", "slowModeMs", "automodEnabled", "allowViewerLinks"];
 function registerLiveTools(server2) {
   server2.registerTool("oko_get_live_state", {
     title: "Get live state",
     description: toolDescription({
       summary: "Read main RTDB live controls, aggregate analytics, and chat settings for an event.",
       args: ["eventId: event to inspect."],
-      returns: "eventId, agg metrics, ctrl live overrides, and chat settings.",
-      examples: ["Use during a webinar before changing live block visibility or starting/ending sessions."]
+      returns: "eventId, agg metrics, ctrl live overrides, and chat settings (mode, slowModeMs, automodEnabled, allowViewerLinks).",
+      examples: ["Use during a webinar before changing live block visibility or starting/ending sessions."],
+      notes: [
+        "Live state does not carry the event team: to see who has access to an event and with which permissions, use oko_list_workspace_access on the event's workspace."
+      ]
     }),
     inputSchema: { eventId: eventIdField },
     outputSchema: liveStateOutputSchema,
@@ -119691,12 +119769,18 @@ function registerLiveTools(server2) {
   }, async ({ eventId }) => {
     const { uid } = await authed(["analytics:read"]);
     await readEvent(eventId, uid, "analytics");
-    const [aggSnap, ctrlSnap, chatSettingsSnap] = await Promise.all([
+    const [aggSnap, ctrlSnap, ...chatSnaps] = await Promise.all([
       get(ref(rtdb, `events/${eventId}/agg`)),
       get(ref(rtdb, `events/${eventId}/ctrl`)),
-      get(ref(chatRtdb, `settings/${eventId}`))
+      ...CHAT_LIVE_SETTINGS.map((field2) => get(ref(chatRtdb, `settings/${eventId}/${field2}`)))
     ]);
-    return textResult({ eventId, agg: aggSnap.val() ?? {}, ctrl: ctrlSnap.val() ?? {}, chat: chatSettingsSnap.val() ?? {} });
+    const chat = {};
+    CHAT_LIVE_SETTINGS.forEach((field2, index) => {
+      const value = chatSnaps[index]?.val();
+      if (value !== null && value !== void 0)
+        chat[field2] = value;
+    });
+    return textResult({ eventId, agg: aggSnap.val() ?? {}, ctrl: ctrlSnap.val() ?? {}, chat });
   });
   server2.registerTool("oko_set_block_visibility", {
     title: "Set live block visibility",
@@ -120831,7 +120915,11 @@ function registerWorkspaceTools(server2) {
         "workspaceId: workspace owned by the authenticated organizer.",
         "code: optional invite code, 16-64 chars; omitted means generated (recommended).",
         "email: optional intended recipient email.",
-        "permissions: optional whitelist of workspace permission booleans.",
+        // The schema is `workspacePermissionsSchema`: nine booleans, all
+        // required, no extra keys. "optional whitelist" read as "send the
+        // ones you want", and every such call was rejected by validation
+        // before it reached the platform.
+        "permissions: required object of all nine workspace permission booleans (createEvents, editSetup, deleteEvents, controlLive, moderateChat, startSession, viewAnalytics, downloadReports, sendNotifications) \u2014 every key must be present, extra keys are rejected; set false for the ones the invitee should not get.",
         "confirm: must be true."
       ],
       returns: "workspaceId, invite code, inviteUrl, and created=true.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.12.9",
+  "version": "0.12.11",
   "description": "Control OKO Stream webinars from Claude, Codex, and other MCP clients.",
   "license": "UNLICENSED",
   "author": {