@okostream/mcp 0.18.0 → 0.18.1

package/README.md

@@ -101,7 +101,8 @@ A new page is a draft: viewers of its public URL see "not published".
   the ledger of the organizer behind the key (scope `wallet:read`, included in
   the `operator` and `full` presets, not in `readOnly`). Keys created before that scope existed get `SCOPE_REQUIRED` and
   need a new key. A page in a shared workspace is paid from the workspace
-  owner's wallet, which is theirs to read.
+  owner's wallet: its balance is told, in the previews and refusals, to whoever
+  may spend from it; its grants and ledger are the owner's to read.
 - **Payment and terms are web-only.** Plans and lumens are bought, and terms
   accepted, only in the OKO web cabinet, and no MCP tool collects a password,
   card or bank details, or agreement to terms on anyone's behalf.

package/dist/server.js

@@ -116320,7 +116320,7 @@ function sanitizeScopes(scopes) {
 }
 
 // build/version.js
-var OKO_MCP_VERSION = "0.18.0";
+var OKO_MCP_VERSION = "0.18.1";
 
 // build/auth.js
 var state = null;
@@ -119581,7 +119581,7 @@ function sessionOutlookWarnings(outlook) {
   if (outlook.lumens.enoughForPlan === false && outlook.lumens.neededForPlan !== null) {
     warnings.push({
       code: "session_lumens_not_enough_for_plan",
-      message: `A session that runs to the end of its plan costs about ${outlook.lumens.neededForPlan} lumens (1 per minute, taken when it ends). The wallet that pays for this workspace holds less: the session would be stopped when the lumens run out. Its owner can top it up. Lumens are checked at Start (a wallet at zero refuses it) and every minute while it runs.`
+      message: `A session that runs to the end of its plan costs about ${outlook.lumens.neededForPlan} lumens (1 per minute, taken when it ends). ` + (typeof outlook.lumens.available === "number" ? `The wallet that pays for this workspace holds ${outlook.lumens.available}, which is less: ` : "The wallet that pays for this workspace holds less: ") + "the session would be stopped when the lumens run out. Its owner can top it up. Lumens are checked at Start (a wallet at zero refuses it) and every minute while it runs."
     });
   }
   return warnings;
@@ -122386,8 +122386,9 @@ function telegramPostRefusalResult(eventId, postId, error3, callerUid) {
       eventId,
       postId,
       needed,
-      // The wallet belongs to the payer: its balance is told to the payer only.
-      ...callerIsPayer && typeof info.available === "number" ? { available: info.available } : {},
+      // The server tells the balance to whoever may spend from the wallet (the payer and a member who may send: decision
+      // 2026-09-30) — this side relays what it was told, whoever the caller is.
+      ...typeof info.available === "number" ? { available: info.available } : {},
       callerIsPayer,
       message: text || `OKO refused to send the Telegram post: the wallet that pays for this event holds fewer than ${needed} lumens. The post was not sent and nothing was charged.`,
       whatToDo: [
@@ -122853,7 +122854,7 @@ function registerWalletTools(server2) {
       ],
       notes: [
         "Needs the wallet:read scope. A key created before that scope existed gets SCOPE_REQUIRED and its scopes cannot be changed: the organizer creates a new key in the OKO cabinet.",
-        "Shows only the wallet of the organizer behind the key. A page in a shared workspace is paid from the WORKSPACE OWNER's wallet: the publish, session and Telegram previews name that payer, and the owner's balance is theirs to read, not this key's.",
+        "Shows only the wallet of the organizer behind the key. A page in a shared workspace is paid from the WORKSPACE OWNER's wallet: the publish, session and Telegram previews and refusals name that payer and tell its balance to whoever may spend from it (publish, start a session, send posts); the owner's grants and ledger are theirs to read, not this key's.",
         "This tool cannot buy, grant, top up or spend lumens. Plans, lumens and payment details belong to the OKO web cabinet only; never ask the organizer for card data or a password.",
         "Refusals of the paid tools use the same codes as the web: ENTITLEMENT_REQUIRED (the plan does not include the feature) and INSUFFICIENT_TOKENS (not enough lumens); PLATFORM_REJECTED_READ here means the platform refused the read."
       ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Control OKO Stream webinars from Claude, Codex, and other MCP clients.",
   "license": "UNLICENSED",
   "author": {