@okostream/mcp 0.18.2 → 0.19.0

package/dist/server.js

@@ -70598,6 +70598,7 @@ function buildConnectionStatus(status, options2 = {}) {
     nextSteps: nextSteps(status, options2.minimumVersion, options2.latestVersion),
     ...options2.minimumVersion ? { minimumVersion: options2.minimumVersion } : {},
     ...options2.latestVersion ? { latestVersion: options2.latestVersion } : {},
+    ...options2.detail && !connected ? { detail: options2.detail } : {},
     ...options2.uid ? { uid: options2.uid } : {},
     ...options2.scopes ? { scopes: options2.scopes } : {},
     ...options2.update ? { update: options2.update } : {}
@@ -70659,7 +70660,7 @@ var GUIDE_RESOURCES = [
       "1. Call `oko_whoami` and inspect scopes.",
       "2. If the workspace is unclear, call `oko_list_workspaces`.",
       "3. Call `oko_create_webinar` with title/date/workspace and video URL when known.",
-      "4. Call `oko_configure_blocks` for video, forms, CTA, banner, and Telegram settings (Telegram channels there need telegram:write plus the notification permission on the event).",
+      "4. Call `oko_configure_blocks` for video, forms, polls, CTA, banner, and Telegram settings (Telegram channels there need telegram:write plus the notification permission on the event).",
       "5. Call `oko_configure_cards` with stable card ids before uploading card images.",
       "6. Upload images with `oko_upload_card_images_batch` or `oko_upload_image`, then wait for variants.",
       "7. Call `oko_validate_event_setup` and fix blocking findings.",
@@ -70677,7 +70678,7 @@ var GUIDE_RESOURCES = [
     text: [
       "# OKO Platform Invariants",
       "",
-      "OKO does not host or encode video. An organizer brings a source such as YouTube or an iframe player. OKO builds the webinar experience around it: an event page, configurable blocks, cards, forms, chat, analytics, and integrations.",
+      "OKO does not host or encode video. An organizer brings a source such as YouTube or an iframe player. OKO builds the webinar experience around it: an event page, configurable blocks, cards, forms, polls, chat, analytics, and integrations.",
       "",
       "- OKO events have no `draft`, `live`, or `ended` status field.",
       "- Public event pages render whenever the event exists and normal access rules allow it.",
@@ -70710,15 +70711,15 @@ var GUIDE_RESOURCES = [
       "- `events:read`: list and read events.",
       "- `events:write`: create, duplicate, move, and update events.",
       "- `events:delete`: trash, restore, and permanently delete already-trashed events.",
-      "- `setup:write`: configure blocks, forms, cards, and images.",
+      "- `setup:write`: configure blocks, forms, polls, cards, and images.",
       "- `analytics:read`: read live state, sessions, reports, and chat history.",
       "- `analytics:write` and `live:control`: manage analytics sessions.",
-      "- `live:control`: change live visibility and refresh viewers.",
+      "- `live:control`: change live visibility, refresh viewers and command polls (`oko_control_poll`).",
       "- `chat:write` and `chat:moderate`: publish and moderate event chat.",
       "- `telegram:write`: link channels and manage Telegram posts.",
       "- `workspace:read` and `workspace:write`: workspaces, members, invites, and notifications.",
       "- `leads:read`: read form submissions; deletion also requires `setup:write`.",
-      "- `wallet:read`: read the lumen balance, grants and ledger of the organizer's own wallet (`oko_wallet`); nothing can be bought, granted or spent with it.",
+      "- `wallet:read`: read the plan, the lumen balance, grants and ledger of the organizer's own wallet (`oko_wallet`) and the balance of the wallet that pays for a workspace (`oko_workspace_wallet`); nothing can be bought, changed, granted or spent with it.",
       "",
       "Payment and terms are web-only: no tool collects a password, card or bank details, or agreement to terms on anyone's behalf. Plans and lumens are bought, and terms accepted, only in the OKO web cabinet."
     ].join("\n")
@@ -70735,11 +70736,12 @@ var GUIDE_RESOURCES = [
       "- `meta.eventDate`: scheduled date.",
       "- `video.originalUrl` / `video.embedUrl`: raw and normalized video URLs.",
       "- `forms[]`: lead forms with stable ids, fields, consent, submit, and success copy.",
+      "- `polls[]`: polls with stable ids \u2014 a question, 2 to 10 options with their own ids, one answer or several. A separate list beside `forms[]`: writing one never touches the other.",
       "- `blocks.primaryCta`, `blocks.promoBanner`, and `blocks.cards`: audience content and live visibility.",
       "- `telegram.channelIds`: claimed Telegram channels for notifications.",
       "- Access mirrors are server-owned and must not be written directly.",
       "",
-      "A `formId` on a CTA, banner, or card opens that event form in a popup. Use `buttonUrl` only for navigation and set exactly one target in new writes.",
+      "A `formId` on a CTA, banner, or card opens that event form in a popup; a `pollId` opens that poll. Use `buttonUrl` only for navigation and set exactly one target in new writes.",
       "",
       "Do not remove unknown fields or write access mirrors. Use dedicated MCP tools instead of whole-document rewrites."
     ].join("\n")
@@ -116320,7 +116322,7 @@ function sanitizeScopes(scopes) {
 }
 
 // build/version.js
-var OKO_MCP_VERSION = "0.18.2";
+var OKO_MCP_VERSION = "0.19.0";
 
 // build/auth.js
 var state = null;
@@ -116526,14 +116528,19 @@ async function getConnectionStatus() {
     }
     const detail = error3 instanceof Error ? `${error3.name}: ${error3.message}` : String(error3);
     console.error(`[oko-mcp] connection status: unexpected error \u2014 ${detail}`);
-    return buildConnectionStatus("unavailable", { serverMessage: `Unexpected client-side error: ${detail}` });
+    return buildConnectionStatus("unavailable", { detail: `Unexpected client-side error: ${detail}` });
   }
 }
 function authErrorOptions(error3) {
   return {
     minimumVersion: error3.minimumVersion,
     latestVersion: error3.latestVersion,
-    serverMessage: error3.serverMessage
+    serverMessage: error3.serverMessage,
+    // 🔴 An `unavailable` error carries its cause in `message` (the transport failure, the HTTP status with the
+    // server's note, the client-side initialisation error). Until 0.19.0 only the constant sentence of the status
+    // went out, and a failed smoke could not say why (28.09: `oko_whoami` failed after a 200 of the exchange, the
+    // retry passed, and the first cause was lost). The other statuses say all there is in their fixed wording.
+    ...error3.status === "unavailable" ? { detail: error3.message } : {}
   };
 }
 function authErrorResult(error3) {
@@ -116565,6 +116572,9 @@ function sessionReportUrl(eventId, sessionId) {
 function inviteUrl(code) {
   return `${APP_ORIGIN}/invite/${code}`;
 }
+function billingUrl() {
+  return `${APP_ORIGIN}/app/billing`;
+}
 function eventLinks(eventId) {
   return {
     url: eventUrl(eventId),
@@ -116592,7 +116602,7 @@ var canonicalTelegramChannelSchema = telegramChannelSchema.extend({
 
 // build/tools/imagePipeline.js
 var import_undici = __toESM(require_undici(), 1);
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { lookup } from "node:dns/promises";
 import { stat, readFile, realpath } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
@@ -116814,6 +116824,207 @@ function detectAndNormalize(url) {
   return { provider: "unknown", normalizedUrl: null };
 }
 
+// build/tools/pollModel.js
+import { randomUUID as randomUUID2 } from "node:crypto";
+var POLL_ID_PATTERN = /^[A-Za-z][A-Za-z0-9-]{0,63}$/;
+var POLL_OPTION_ID_PATTERN = /^[A-Za-z][A-Za-z0-9-]{0,31}$/;
+var RESERVED_IDS = new Set(Object.getOwnPropertyNames(Object.prototype));
+function isSafeId(id, pattern) {
+  return typeof id === "string" && pattern.test(id) && !RESERVED_IDS.has(id);
+}
+var MAX_POLLS = 10;
+var MIN_POLL_OPTIONS = 2;
+var MAX_POLL_OPTIONS = 10;
+var POLL_QUESTION_MAX = 300;
+var POLL_OPTION_TEXT_MAX = 200;
+var POLL_TITLE_MAX = 200;
+var POLL_LABEL_MAX = 60;
+var POLL_THANKS_MAX = 500;
+var DEFAULT_POLL_CTRL = {
+  closed: false,
+  live: false,
+  liveAt: null,
+  resultsShown: false,
+  round: 1
+};
+var POLL_ACTIONS = ["close", "open", "show_results", "hide_results", "launch", "stop", "reset"];
+var CONTROL_ROOM_POLL_ACTIONS = ["launch", "reset"];
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function boundedText(value, max) {
+  if (typeof value !== "string")
+    return null;
+  const trimmed = value.trim();
+  return trimmed && trimmed.length <= max ? trimmed : null;
+}
+function parsePoll(raw) {
+  if (!isRecord(raw))
+    return null;
+  const id = typeof raw.id === "string" ? raw.id : "";
+  const question = boundedText(raw.question, POLL_QUESTION_MAX);
+  if (!isSafeId(id, POLL_ID_PATTERN) || !question || !Array.isArray(raw.options))
+    return null;
+  const options2 = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of raw.options) {
+    if (!isRecord(item))
+      return null;
+    const optionId = typeof item.id === "string" ? item.id : "";
+    const text = boundedText(item.text, POLL_OPTION_TEXT_MAX);
+    if (!isSafeId(optionId, POLL_OPTION_ID_PATTERN) || !text || seen.has(optionId))
+      return null;
+    seen.add(optionId);
+    options2.push({ id: optionId, text });
+  }
+  if (options2.length < MIN_POLL_OPTIONS || options2.length > MAX_POLL_OPTIONS)
+    return null;
+  return {
+    id,
+    question,
+    options: options2,
+    multiple: raw.multiple === true,
+    title: boundedText(raw.title, POLL_TITLE_MAX),
+    submitLabel: boundedText(raw.submitLabel, POLL_LABEL_MAX),
+    thanksText: boundedText(raw.thanksText, POLL_THANKS_MAX)
+  };
+}
+function parseEventPolls(raw) {
+  if (!Array.isArray(raw))
+    return [];
+  const polls = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const item of raw.slice(0, MAX_POLLS)) {
+    const poll = parsePoll(item);
+    if (poll && !ids.has(poll.id)) {
+      ids.add(poll.id);
+      polls.push(poll);
+    }
+  }
+  return polls;
+}
+function pollIdSet(polls) {
+  return new Set((Array.isArray(polls) ? polls : []).map((poll) => isRecord(poll) && typeof poll.id === "string" ? poll.id.trim() : "").filter(Boolean));
+}
+function readPollState(node) {
+  const raw = isRecord(node) ? node : {};
+  const round = typeof raw.round === "number" && Number.isInteger(raw.round) && raw.round >= 1 ? raw.round : 1;
+  return {
+    closed: raw.closed === true,
+    live: raw.live === true,
+    liveAt: typeof raw.liveAt === "number" && Number.isFinite(raw.liveAt) ? raw.liveAt : null,
+    resultsShown: raw.resultsShown === true,
+    round
+  };
+}
+function readPollTally(node) {
+  const raw = isRecord(node) ? node : {};
+  const count = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+  const options2 = {};
+  if (isRecord(raw.options)) {
+    for (const [optionId, value] of Object.entries(raw.options)) {
+      if (isSafeId(optionId, POLL_OPTION_ID_PATTERN))
+        options2[optionId] = count(value);
+    }
+  }
+  return { total: count(raw.total), options: options2 };
+}
+function readSessionPolls(raw) {
+  if (!Array.isArray(raw))
+    return [];
+  const count = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+  const rounds = [];
+  for (const item of raw) {
+    if (!isRecord(item))
+      continue;
+    if (typeof item.pollId !== "string" || !item.pollId)
+      continue;
+    if (typeof item.round !== "number" || !Number.isInteger(item.round) || item.round < 1)
+      continue;
+    const options2 = Array.isArray(item.options) ? item.options.flatMap((option) => isRecord(option) && typeof option.id === "string" ? [{ id: option.id, text: typeof option.text === "string" ? option.text : option.id, count: count(option.count) }] : []) : [];
+    rounds.push({
+      pollId: item.pollId,
+      question: typeof item.question === "string" ? item.question : "",
+      round: item.round,
+      multiple: item.multiple === true,
+      options: options2,
+      total: count(item.total)
+    });
+  }
+  return rounds;
+}
+var OPTION_ID_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
+function newPollId() {
+  return `p-${randomUUID2()}`;
+}
+function newOptionId(taken = /* @__PURE__ */ new Set()) {
+  for (let attempt = 0; attempt < 8; attempt += 1) {
+    const chars = Array.from(randomUUID2().replace(/-/g, "").slice(0, 8), (char) => OPTION_ID_ALPHABET[parseInt(char, 16) % OPTION_ID_ALPHABET.length]);
+    const id = `o${chars.join("")}`;
+    if (!taken.has(id))
+      return id;
+  }
+  return `o${randomUUID2().replace(/-/g, "").slice(0, 16)}`;
+}
+var orNull = (value) => value?.trim() || null;
+function buildPollsForWrite(inputs, ids = { poll: newPollId, option: newOptionId }) {
+  if (inputs.length > MAX_POLLS)
+    throw new Error(`At most ${MAX_POLLS} polls fit on a page.`);
+  const seenPolls = /* @__PURE__ */ new Set();
+  return inputs.map((input, index) => {
+    const where2 = `polls[${index}]`;
+    const id = input.id ?? ids.poll();
+    if (!isSafeId(id, POLL_ID_PATTERN)) {
+      throw new Error(`${where2}.id "${id}" is not a usable poll id: a letter first, then letters, digits or hyphens, up to 64 characters.`);
+    }
+    if (seenPolls.has(id))
+      throw new Error(`${where2}.id "${id}" is used by another poll in this call: every poll needs its own id.`);
+    seenPolls.add(id);
+    const question = input.question.trim();
+    if (!question)
+      throw new Error(`${where2}.question is empty.`);
+    if (question.length > POLL_QUESTION_MAX)
+      throw new Error(`${where2}.question is longer than ${POLL_QUESTION_MAX} characters.`);
+    const taken = new Set(input.options.flatMap((option) => option.id ? [option.id] : []));
+    const seenOptions = /* @__PURE__ */ new Set();
+    const options2 = input.options.map((option, optionIndex) => {
+      const optionWhere = `${where2}.options[${optionIndex}]`;
+      const optionId = option.id ?? ids.option(taken);
+      taken.add(optionId);
+      if (!isSafeId(optionId, POLL_OPTION_ID_PATTERN)) {
+        throw new Error(`${optionWhere}.id "${optionId}" is not a usable option id: a letter first, then letters, digits or hyphens, up to 32 characters.`);
+      }
+      if (seenOptions.has(optionId))
+        throw new Error(`${optionWhere}.id "${optionId}" is used by another option of the same poll.`);
+      seenOptions.add(optionId);
+      const text = option.text.trim();
+      if (!text)
+        throw new Error(`${optionWhere}.text is empty.`);
+      if (text.length > POLL_OPTION_TEXT_MAX)
+        throw new Error(`${optionWhere}.text is longer than ${POLL_OPTION_TEXT_MAX} characters.`);
+      return { id: optionId, text };
+    });
+    if (options2.length < MIN_POLL_OPTIONS || options2.length > MAX_POLL_OPTIONS) {
+      throw new Error(`${where2} needs ${MIN_POLL_OPTIONS} to ${MAX_POLL_OPTIONS} options, got ${options2.length}.`);
+    }
+    const capped = (name7, max) => {
+      const value = orNull(input[name7]);
+      if (value !== null && value.length > max)
+        throw new Error(`${where2}.${name7} is longer than ${max} characters.`);
+      return value;
+    };
+    return {
+      id,
+      question,
+      options: options2,
+      multiple: input.multiple === true,
+      title: capped("title", POLL_TITLE_MAX),
+      submitLabel: capped("submitLabel", POLL_LABEL_MAX),
+      thanksText: capped("thanksText", POLL_THANKS_MAX)
+    };
+  });
+}
+
 // build/tools/formatting.js
 var RETIRED_SESSION_FIELDS = ["nmoEvaluation"];
 function cursorMeta(count, max, hasMore, nextCursor) {
@@ -116984,17 +117195,31 @@ function reportQualityCaveats(dataQuality) {
     caveats.push("watchTimeUnmeasured");
   if (marks.watchTime === "unknown_duration")
     caveats.push("watchTimeUncapped");
+  if (marks.polls === "unmeasured")
+    caveats.push("pollsUnmeasured");
   return caveats;
 }
 var REPORT_QUALITY_CAVEAT_TEXT = {
   baselineMissing: "The session baseline was not saved: every figure below is counted from zero and includes everything the event accumulated before this broadcast.",
   startTimeUnknown: "The broadcast start time was not saved: the report is stamped with the moment it ended and its duration reads zero.",
   watchTimeUnmeasured: "Watch time was not measured: the engagement snapshot could not be read.",
-  watchTimeUncapped: "Watch time is not capped by the broadcast length \u2014 it is unknown, so nothing vouches for the total, average and median times."
+  watchTimeUncapped: "Watch time is not capped by the broadcast length \u2014 it is unknown, so nothing vouches for the total, average and median times.",
+  pollsUnmeasured: "The votes of this session could not be counted: an empty polls section means \u201Cnot measured\u201D, not \u201Cnobody voted\u201D."
 };
 function sessionQualityWarnings(dataQuality) {
   return reportQualityCaveats(dataQuality).map((caveat) => REPORT_QUALITY_CAVEAT_TEXT[caveat]);
 }
+function pollRoundMarkdown(round) {
+  const name7 = round.question || "(a poll no longer on the page)";
+  const several = round.multiple ? ", several answers allowed" : "";
+  const voters = `${round.total} ${round.total === 1 ? "voter" : "voters"}`;
+  const lines = [`- ${name7} \u2014 round ${round.round}${several}: ${voters}`];
+  for (const option of round.options) {
+    const share = round.total > 0 ? ` (${Math.round(option.count / round.total * 1e3) / 10}%)` : "";
+    lines.push(`  - ${option.text}: ${option.count}${share}`);
+  }
+  return lines;
+}
 function sessionReportMarkdown({ eventId, event, sessionId, session }) {
   const lines = [
     `# OKO session report`,
@@ -117024,6 +117249,12 @@ function sessionReportMarkdown({ eventId, event, sessionId, session }) {
     markdownMetric("CTA clicks", session.ctaClicks),
     markdownMetric("Cards clicks", session.cardsClicks)
   ];
+  const pollRounds = readSessionPolls(session.polls);
+  if (pollRounds.length > 0) {
+    lines.push("", "## Polls", "Votes cast during this session. A round that ran through several sessions is split between their reports.");
+    for (const round of pollRounds)
+      lines.push(...pollRoundMarkdown(round));
+  }
   const warnings = sessionQualityWarnings(session.dataQuality);
   if (warnings.length > 0) {
     lines.push("", "## What this report did not measure");
@@ -117420,10 +117651,10 @@ async function uploadImageFromSource(eventId, kind, cardId, source) {
     const uploaded2 = await uploadMasterImage(eventId, kind, cardId, { sourceUrl: source.url });
     return { uploaded: uploaded2, sourceBytes: uploaded2.sourceBytes ?? 0, sourceVia: "server", notes: [SERVER_FETCH_NOTE] };
   } catch (error3) {
-    const refusal6 = serverFetchRefusal(error3);
-    if (!refusal6)
+    const refusal7 = serverFetchRefusal(error3);
+    if (!refusal7)
       throw error3;
-    serverFailure = refusal6;
+    serverFailure = refusal7;
   }
   let buffer;
   const fetchNotes = [];
@@ -117517,7 +117748,7 @@ function readCardsConfig(eventData) {
       // 🔴 The UUID is generated only when it is needed: previously the
       // crypto RNG was invoked for every card on every read, and the value
       // was discarded (review 02.09, R3c-14)
-      id: hasUsableId ? item.id : randomUUID2(),
+      id: hasUsableId ? item.id : randomUUID3(),
       title: safeString(item.title).trim() || null,
       text: safeString(item.text).trim() || null,
       buttonLabel: safeString(item.buttonLabel).trim() || null,
@@ -117527,7 +117758,8 @@ function readCardsConfig(eventData) {
       imageVariants: readImageVariants(item.imageVariants),
       imageWidth: typeof item.imageWidth === "number" ? item.imageWidth : null,
       imageHeight: typeof item.imageHeight === "number" ? item.imageHeight : null,
-      formId: safeString(item.formId).trim() || null
+      formId: safeString(item.formId).trim() || null,
+      pollId: safeString(item.pollId).trim() || null
     };
   });
   const ratio = safeString(raw.cardImageRatio);
@@ -117566,6 +117798,9 @@ function eventFormIds(eventData) {
   const rawForms = Array.isArray(eventData.forms) ? eventData.forms : [];
   return new Set(rawForms.map((form) => form && typeof form === "object" && !Array.isArray(form) ? safeString(form.id).trim() : "").filter(Boolean));
 }
+function eventPollIds(eventData) {
+  return pollIdSet(eventData.polls);
+}
 function cardHasImage(item) {
   return Boolean(item.imageMasterUrl || item.imageUrl || item.imageVariants);
 }
@@ -117576,7 +117811,8 @@ var cardItemInputSchema = external_exports.object({
   text: external_exports.string().max(MAX_CARD_TEXT_LENGTH).nullable().optional(),
   buttonLabel: external_exports.string().max(MAX_CARD_BUTTON_LABEL_LENGTH).nullable().optional(),
   buttonUrl: external_exports.string().max(MAX_CARD_BUTTON_URL_LENGTH).nullable().optional(),
-  formId: cardIdSchema.nullable().optional()
+  formId: cardIdSchema.nullable().optional(),
+  pollId: cardIdSchema.nullable().optional().describe("Opens this event poll (an id of oko_configure_blocks polls) instead of a link or a form. A button has one action: set at most one of buttonUrl, formId, pollId.")
 }).strict();
 var imageSourceSchema = external_exports.object({
   path: external_exports.string().min(1).optional().describe("Local image path on the MCP client machine (inside OKO_IMAGE_ROOTS)."),
@@ -117584,13 +117820,14 @@ var imageSourceSchema = external_exports.object({
 }).strict().refine((source) => Boolean(source.path) !== Boolean(source.url), {
   message: "Provide exactly one image source: path or url."
 });
-function buildCardsItems({ inputs, existing, formIds }) {
+function buildCardsItems({ inputs, existing, formIds, pollIds }) {
   const existingById = new Map(existing.map((item) => [item.id, item]));
   const seen = /* @__PURE__ */ new Set();
   const generatedCardIds = [];
   const preservedImageCardIds = [];
+  const droppedBindings = [];
   const items = inputs.map((input) => {
-    const id = input.id ?? randomUUID2();
+    const id = input.id ?? randomUUID3();
     if (seen.has(id))
       throw new Error(`Duplicate card id "${id}". Each card id must be unique.`);
     seen.add(id);
@@ -117602,9 +117839,20 @@ function buildCardsItems({ inputs, existing, formIds }) {
     if (formId && !formIds.has(formId)) {
       throw new Error(`Form ${formId} not found in event.forms. Create it with oko_configure_blocks forms first, or set formId:null.`);
     }
+    const pollId = normalizeNullableText(input.pollId);
+    if (pollId && !pollIds.has(pollId)) {
+      throw new Error(`Poll ${pollId} not found in event.polls. Create it with oko_configure_blocks polls first, or set pollId:null.`);
+    }
+    if (formId && pollId) {
+      throw new Error(`Card ${id} cannot open a form and a poll at once: a button has one action. Keep formId or pollId and set the other to null.`);
+    }
     const previous = existingById.get(id);
     if (previous && cardHasImage(previous))
       preservedImageCardIds.push(id);
+    if (previous?.formId && !formId)
+      droppedBindings.push({ cardId: id, kind: "form", targetId: previous.formId });
+    if (previous?.pollId && !pollId)
+      droppedBindings.push({ cardId: id, kind: "poll", targetId: previous.pollId });
     return {
       id,
       title: normalizeNullableText(input.title),
@@ -117616,10 +117864,11 @@ function buildCardsItems({ inputs, existing, formIds }) {
       imageVariants: previous?.imageVariants ?? null,
       imageWidth: previous?.imageWidth ?? null,
       imageHeight: previous?.imageHeight ?? null,
-      formId
+      formId,
+      pollId
     };
   });
-  return { items, generatedCardIds, preservedImageCardIds };
+  return { items, generatedCardIds, preservedImageCardIds, droppedBindings };
 }
 async function deleteStoragePaths(eventId, paths) {
   const uniquePaths = [...new Set(paths.filter(Boolean))];
@@ -117890,6 +118139,8 @@ var connectionStatusOutputSchema = external_exports.object({
   status: external_exports.enum(OKO_CONNECTION_STATUSES),
   errorCode: external_exports.string().nullable(),
   message: external_exports.string(),
+  /** Why the connection could not be verified (`unavailable` only): the cause, next to the stable message. */
+  detail: external_exports.string().optional(),
   product: external_exports.object({
     name: external_exports.string(),
     summary: external_exports.string(),
@@ -118045,8 +118296,18 @@ var notificationsMarkOutputSchema = external_exports.object({
   markedRead: external_exports.number().int().nonnegative(),
   notificationIds: external_exports.array(external_exports.string())
 }).passthrough();
+var walletPlanSchema = external_exports.object({
+  tier: external_exports.enum(["core", "pro", "max", "legacy"]),
+  status: external_exports.enum(["active", "past_due", "canceled_at_period_end", "expired"]),
+  source: external_exports.enum(["lava", "operator", "legacy-exit", "transition-b", "smoke"]).nullable(),
+  periodEnd: external_exports.string().nullable(),
+  graceUntil: external_exports.string().nullable()
+});
 var walletOutputSchema = external_exports.object({
   uid: external_exports.string(),
+  billingUrl: external_exports.string().url(),
+  plan: walletPlanSchema.nullable().optional(),
+  planRead: external_exports.enum(["ok", "unreadable"]).optional(),
   hasWallet: external_exports.boolean(),
   balance: external_exports.number().int().nullable(),
   unit: external_exports.literal("lumens"),
@@ -118057,6 +118318,15 @@ var walletOutputSchema = external_exports.object({
   hints: external_exports.array(external_exports.string()),
   ...cursorMetaSchema
 }).passthrough();
+var workspaceWalletOutputSchema = external_exports.object({
+  workspaceId: external_exports.string(),
+  hasWallet: external_exports.boolean(),
+  available: external_exports.number().int().nullable(),
+  unit: external_exports.literal("lumens"),
+  payerIsCaller: external_exports.boolean(),
+  billingUrl: external_exports.string().url(),
+  hints: external_exports.array(external_exports.string())
+}).passthrough();
 var FORM_FIELD_TYPES = ["text", "tel", "email", "textarea", "select", "checkbox"];
 var formFieldSchema = external_exports.object({
   id: external_exports.string().min(1).optional(),
@@ -118085,6 +118355,19 @@ var formSchema = external_exports.object({
   consentRequired: external_exports.boolean().default(true),
   fields: external_exports.array(formFieldSchema).max(30)
 }).strict();
+var pollOptionSchema = external_exports.object({
+  id: external_exports.string().regex(POLL_OPTION_ID_PATTERN, "A letter first, then letters, digits or hyphens, up to 32 characters.").optional().describe("Stable option id. Keep it when editing a poll: the votes of an option are tied to its id, so a renamed option keeps its count. Omit for a NEW option."),
+  text: external_exports.string().min(1).max(POLL_OPTION_TEXT_MAX).describe("The option as viewers read it.")
+}).strict();
+var pollSchema = external_exports.object({
+  id: external_exports.string().regex(POLL_ID_PATTERN, "A letter first, then letters, digits or hyphens, up to 64 characters.").optional().describe("Stable poll id; buttons bind to it (pollId). Keep it when editing. Omit for a NEW poll."),
+  question: external_exports.string().min(1).max(POLL_QUESTION_MAX).describe("The question viewers answer."),
+  options: external_exports.array(pollOptionSchema).min(MIN_POLL_OPTIONS).max(MAX_POLL_OPTIONS),
+  multiple: external_exports.boolean().optional().describe("true: viewers may pick several options (checkboxes); false or omitted: exactly one."),
+  title: external_exports.string().max(POLL_TITLE_MAX).nullable().optional().describe("Heading of the popup; null or omitted: the question is the heading."),
+  submitLabel: external_exports.string().max(POLL_LABEL_MAX).nullable().optional().describe("Label of the vote button."),
+  thanksText: external_exports.string().max(POLL_THANKS_MAX).nullable().optional().describe("Shown after the vote while the results are hidden.")
+}).strict();
 var profileDisplayNameSchema = external_exports.string().max(40).nullable();
 var timezoneSchema = external_exports.string().min(1).max(100).regex(/^[A-Za-z0-9_+./-]+$/, "Use an IANA timezone such as Europe/Moscow or UTC.").refine((value) => {
   try {
@@ -118158,14 +118441,14 @@ var SCOPE_UNLOCKS = {
   "setup:write": "image uploads and setup-only changes",
   "analytics:read": "analytics, sessions, and reports",
   "analytics:write": "starting, ending, and repairing analytics sessions",
-  "live:control": "live block visibility, live badge, viewer refresh",
+  "live:control": "live block visibility, live badge, viewer refresh, poll commands",
   "chat:write": "sending organizer chat messages",
   "chat:moderate": "chat mode, moderation, bans and mutes",
   "telegram:write": "claiming channels and publishing Telegram posts",
   "workspace:read": "listing workspaces, members, invites, notifications",
   "workspace:write": "workspace management, invites, profile edits",
   "leads:read": "reading and exporting leads",
-  "wallet:read": "reading the lumen balance, grants and ledger of the organizer's own wallet"
+  "wallet:read": "reading the plan, the lumen balance, grants and ledger of the organizer's own wallet, and the balance of the wallet that pays for a workspace"
 };
 function presetsWithScope(scope) {
   return Object.entries(MCP_PRESETS).filter(([, scopes]) => scopes.includes(scope)).map(([name7]) => name7);
@@ -118409,6 +118692,7 @@ var SCOPE_WORKAROUNDS = {
   "oko_trash_event|events:delete": { text: "This key cannot delete events. Tell the organizer which event to remove; they can do it in the OKO cabinet, or create a key with the full preset." },
   "oko_delete_event_permanently|events:delete": { text: "This key cannot delete events. Tell the organizer which event to remove; they can do it in the OKO cabinet, or create a key with the full preset." },
   "oko_wallet|wallet:read": { text: "A key created before wallet:read existed does not carry it, and the scopes of a key cannot be changed: the organizer creates a new key in the OKO cabinet, puts it into OKO_API_KEY of the MCP client and revokes the old one. Until then the balance and the ledger are visible in the cabinet under Billing." },
+  "oko_workspace_wallet|wallet:read": { text: "A key created before wallet:read existed does not carry it, and the scopes of a key cannot be changed: the organizer creates a new key in the OKO cabinet, puts it into OKO_API_KEY of the MCP client and revokes the old one. Until then the balance is visible in the cabinet under Billing." },
   "oko_publish_telegram_post|telegram:write": { text: "This key cannot publish to Telegram. The organizer can publish the announcement from the OKO cabinet, or create a key with the full preset." },
   // 🔴 The most frequent refusal of this whole release (`ADV-A6-19`): an
   // `operator` key calling oko_configure_blocks with channel ids. The advice
@@ -119155,7 +119439,7 @@ function registerPublicationTools(server2) {
       examples: ["Call without confirm, show the organizer the bill from the preview, and call again with confirm: true after explicit consent."],
       notes: [
         "The wallet belongs to the workspace owner; a member publishing in a shared workspace spends the owner's lumens.",
-        "Refusals carry errorCode and whatToDo: ENTITLEMENT_REQUIRED, INSUFFICIENT_TOKENS, EVENT_DATE_REQUIRED, EVENT_WINDOW_PASSED (the event date is more than 48 hours in the past \u2014 move it forward), PAYER_UNRESOLVED, WORKSPACE_INACTIVE (the plan holds fewer shared workspaces than the owner has \u2014 on Pro only the workspace the owner chose as active takes NEW publications; the owner picks it on the OKO cabinet's Workspaces page, or moves to Max), EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH, EVENT_DATE_LOCKED (from oko_update_event, not this tool).",
+        "Refusals carry errorCode and whatToDo: ENTITLEMENT_REQUIRED, INSUFFICIENT_TOKENS, EVENT_DATE_REQUIRED, EVENT_WINDOW_PASSED (the event date is more than 48 hours in the past \u2014 move it forward), PAYER_UNRESOLVED, WORKSPACE_INACTIVE (only a NEW publication into a shared workspace is closed: Core \u2014 shared workspaces are not included (Pro); Pro \u2014 one active workspace (the owner's choice, or Max); no live subscription \u2014 renew; the owner makes a workspace the active one on the OKO cabinet's Workspaces page), EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH, EVENT_DATE_LOCKED (from oko_update_event, not this tool).",
         'Repeating confirm on a published page charges nothing and repairs viewer-side switches; on a page whose show is over ("held"/\u041F\u0440\u043E\u0432\u0435\u0434\u0435\u043D\u043E) it charges nothing either and starts nothing new \u2014 duplicate the page for a new show.',
         "Once published, the event date moves only inside the show window bought here (oko_update_event refuses EVENT_DATE_LOCKED outside it): for another date, unpublish with oko_unpublish_event first while the window has not opened, or duplicate the page."
       ]
@@ -119226,6 +119510,8 @@ function paidBlocksTurnedOn(patch) {
     blocks.push("cards");
   if (Array.isArray(patch.forms) && patch.forms.length > 0)
     blocks.push("forms");
+  if (Array.isArray(patch.polls) && patch.polls.length > 0)
+    blocks.push("polls");
   return blocks;
 }
 function pageSoldItsShow(event) {
@@ -119390,6 +119676,59 @@ function controlRoomPreview(event) {
   };
 }
 
+// build/tools/pollBindings.js
+var BLOCK_POLL_BINDING_FIELDS = [
+  "blocks.promoBanner.pollId",
+  "blocks.primaryCta.pollId"
+];
+var FORM_FIELD_OF = {
+  "blocks.promoBanner.pollId": "blocks.promoBanner.formId",
+  "blocks.primaryCta.pollId": "blocks.primaryCta.formId"
+};
+function pollBindingsAfterPatch(fresh, patch) {
+  const bindings = [];
+  for (const field2 of BLOCK_POLL_BINDING_FIELDS) {
+    const value = valueAfterPatch(fresh, patch, field2);
+    if (typeof value === "string" && value)
+      bindings.push({ field: field2, pollId: value });
+  }
+  const cards = valueAfterPatch(fresh, patch, "blocks.cards.items");
+  if (Array.isArray(cards)) {
+    cards.forEach((card, index) => {
+      const pollId = card && typeof card === "object" && !Array.isArray(card) ? card.pollId : null;
+      if (typeof pollId === "string" && pollId) {
+        bindings.push({ field: `blocks.cards.items[${index}].pollId`, pollId });
+      }
+    });
+  }
+  return bindings;
+}
+function assertPollBindingsExist(fresh, patch) {
+  const pollsAfter = pollIdSet(valueAfterPatch(fresh, patch, "polls"));
+  for (const field2 of BLOCK_POLL_BINDING_FIELDS) {
+    if (!Object.prototype.hasOwnProperty.call(patch, field2))
+      continue;
+    const value = patch[field2];
+    if (typeof value !== "string" || !value)
+      continue;
+    if (!pollsAfter.has(value)) {
+      throw new Error(`${field2}: poll "${value}" not found in event.polls. Create the poll in the same call (or beforehand) \u2014 a button bound to a missing poll does nothing for viewers.`);
+    }
+    const formField = FORM_FIELD_OF[field2];
+    const form = valueAfterPatch(fresh, patch, formField);
+    if (typeof form === "string" && form) {
+      throw new Error(`${field2}: this button already opens the form "${form}", and a button has one action. Pass ${field2.split(".")[1]}: {formId: null} in the same call to switch it to the poll.`);
+    }
+  }
+  const pollsBefore = pollIdSet(valueAfterPatch(fresh, {}, "polls"));
+  const orphaned = pollBindingsAfterPatch(fresh, patch).filter((binding) => !pollsAfter.has(binding.pollId) && pollsBefore.has(binding.pollId));
+  if (orphaned.length === 0)
+    return;
+  const listed = orphaned.map((binding) => `${binding.field} -> "${binding.pollId}"`).join(", ");
+  const cardsAffected = orphaned.some((binding) => binding.field.startsWith("blocks.cards."));
+  throw new Error(`This call removes a poll that buttons still point at: ${listed}. A button bound to a missing poll does nothing for viewers, so the removal is refused while something still points at it. Unbind them first: pass promoBanner: {pollId: null} and/or primaryCta: {pollId: null} in this same call` + (cardsAffected ? ", and clear the card bindings with oko_configure_cards (pollId: null on those cards) before removing the poll." : "."));
+}
+
 // build/tools/eventCreate.js
 async function assertCanCreateInWorkspace(uid, workspaceId) {
   if (workspaceId === uid)
@@ -119467,6 +119806,11 @@ function buildDuplicateEventDocument(input) {
     meta: withoutSessionPlan(source.meta) ?? { eventDate: null, speakerName: null, description: null },
     blocks: source.blocks ?? {},
     ...Array.isArray(source.forms) ? { forms: source.forms } : {},
+    // Polls travel with the copy like forms do: a button of `blocks` can point at a pollId, and a copy without
+    // `polls` would leave that button bound to a poll the new document does not have. Only the CONFIGURATION is
+    // copied — the votes, the rounds and the state of the show stay with the source, so the copy starts at round 1
+    // with no votes (the web's duplicate does the same, `EventsPageClient.tsx`).
+    ...Array.isArray(source.polls) ? { polls: source.polls } : {},
     // 🔴 The copy does NOT inherit server-owned Telegram markers.
     // `reminderSent` is set by CF17 after sending the reminder, and the same
     // function skips events with this flag forever: a copy of an event whose
@@ -119525,7 +119869,7 @@ function scheduleWindowPassed(sessionMode, eventDateMs, rawDurationMinutes, nowM
 }
 
 // build/tools/sessionPlan.js
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function timestampMillis(value) {
@@ -119537,7 +119881,7 @@ function timestampMillis(value) {
   return null;
 }
 function readSessionPlan(event, durationMsOf) {
-  const meta2 = isRecord(event.meta) ? event.meta : {};
+  const meta2 = isRecord2(event.meta) ? event.meta : {};
   const startMs = timestampMillis(meta2.sessionStartAt);
   const endMs = timestampMillis(meta2.sessionEndAt);
   if (startMs !== null && endMs !== null && endMs > startMs)
@@ -119555,7 +119899,7 @@ function sessionPlanWarnings(event) {
   const plan = sessionPlanOf(event);
   if (!plan || plan.source !== "meta")
     return [];
-  const meta2 = isRecord(event.meta) ? event.meta : {};
+  const meta2 = isRecord2(event.meta) ? event.meta : {};
   const eventDateMs = timestampMillis(meta2.eventDate);
   if (eventDateMs === null)
     return [];
@@ -119759,11 +120103,40 @@ function validateEventSetup(eventId, event, nowMs = Date.now()) {
     if (id && !formIds.has(id))
       add(errors, "form_binding_missing", path, `Referenced formId "${id}" does not exist in event.forms.`);
   };
+  const rawPolls = Array.isArray(event.polls) ? event.polls : [];
+  const servedPollIds = new Set(parseEventPolls(event.polls).map((poll) => poll.id));
+  const seenPollIds = /* @__PURE__ */ new Set();
+  rawPolls.slice(0, MAX_POLLS).forEach((raw, index) => {
+    const id = safeString(asRecord(raw).id).trim();
+    if (id && seenPollIds.has(id)) {
+      add(errors, "poll_id_duplicate", `polls[${index}].id`, `Duplicate poll id: ${id}. OKO serves the first poll with an id and drops the rest.`);
+    } else if (parsePoll(raw) === null) {
+      add(errors, "poll_invalid", `polls[${index}]`, "This poll is not complete, so viewers cannot open it: a poll needs its own id, a question and 2 to 10 options, each with an id and a text. Complete it or remove it with oko_configure_blocks polls.");
+    }
+    if (id)
+      seenPollIds.add(id);
+  });
+  if (rawPolls.length > MAX_POLLS) {
+    add(warnings, "polls_too_many", "polls", `The page lists ${rawPolls.length} polls; OKO serves the first ${MAX_POLLS} and ignores the rest.`);
+  }
+  const checkPollBinding = (path, pollId) => {
+    const id = safeString(pollId).trim();
+    if (id && !servedPollIds.has(id)) {
+      add(errors, "poll_binding_missing", path, `Referenced pollId "${id}" is not a poll OKO serves: it does not exist in event.polls, or it is not complete.`);
+    }
+  };
+  const checkTargetsConflict = (path, formId, pollId) => {
+    if (safeString(formId).trim() && safeString(pollId).trim()) {
+      add(warnings, "poll_binding_shadowed", path, "The button is bound to a form AND a poll; the form wins, so the poll never opens. Keep one: set the other to null.");
+    }
+  };
   const promo = asRecord(blocks.promoBanner);
   if (promo.enabled === true) {
     checkFormBinding("blocks.promoBanner.formId", promo.formId);
-    if (!safeString(promo.link).trim() && !safeString(promo.formId).trim()) {
-      add(suggestions, "promo_target_missing", "blocks.promoBanner", "Enabled promo banner has no link or form binding.");
+    checkPollBinding("blocks.promoBanner.pollId", promo.pollId);
+    checkTargetsConflict("blocks.promoBanner", promo.formId, promo.pollId);
+    if (!safeString(promo.link).trim() && !safeString(promo.formId).trim() && !safeString(promo.pollId).trim()) {
+      add(suggestions, "promo_target_missing", "blocks.promoBanner", "Enabled promo banner has no link, form or poll binding.");
     }
     if (!safeString(promo.imageUrl).trim()) {
       add(warnings, "promo_image_missing", "blocks.promoBanner.imageUrl", "Enabled promo banner has no image.");
@@ -119776,14 +120149,16 @@ function validateEventSetup(eventId, event, nowMs = Date.now()) {
   const cta = asRecord(blocks.primaryCta);
   if (cta.enabled === true) {
     checkFormBinding("blocks.primaryCta.formId", cta.formId);
+    checkPollBinding("blocks.primaryCta.pollId", cta.pollId);
+    checkTargetsConflict("blocks.primaryCta", cta.formId, cta.pollId);
     if (!safeString(cta.title).trim() && !safeString(cta.text).trim()) {
       add(suggestions, "cta_copy_missing", "blocks.primaryCta", "Enabled CTA has no title or text.");
     }
     if (!safeString(cta.buttonLabel).trim()) {
       add(warnings, "cta_button_missing", "blocks.primaryCta.buttonLabel", "Enabled CTA has no button label.");
     }
-    if (safeString(cta.buttonLabel).trim() && !safeString(cta.buttonUrl).trim() && !safeString(cta.formId).trim()) {
-      add(warnings, "cta_target_missing", "blocks.primaryCta", "CTA button has no URL or form binding.");
+    if (safeString(cta.buttonLabel).trim() && !safeString(cta.buttonUrl).trim() && !safeString(cta.formId).trim() && !safeString(cta.pollId).trim()) {
+      add(warnings, "cta_target_missing", "blocks.primaryCta", "CTA button has no URL, form or poll binding.");
     }
   }
   const videoPlaceholder = asRecord(asRecord(blocks.video).placeholder);
@@ -119812,10 +120187,13 @@ function validateEventSetup(eventId, event, nowMs = Date.now()) {
       cardIds.add(card.id);
       if (!card.title && !card.text)
         add(suggestions, "card_copy_missing", path, "Card has no title or text.");
-      if (card.buttonLabel && !card.buttonUrl && !card.formId)
-        add(warnings, "card_target_missing", path, "Card button has no URL or form binding.");
+      if (card.buttonLabel && !card.buttonUrl && !card.formId && !card.pollId)
+        add(warnings, "card_target_missing", path, "Card button has no URL, form or poll binding.");
       if (card.formId && !formIds.has(card.formId))
         add(errors, "card_form_missing", `${path}.formId`, `Referenced formId "${card.formId}" does not exist.`);
+      if (card.pollId && !servedPollIds.has(card.pollId))
+        add(errors, "card_poll_missing", `${path}.pollId`, `Referenced pollId "${card.pollId}" is not a poll OKO serves: it does not exist in event.polls, or it is not complete.`);
+      checkTargetsConflict(path, card.formId, card.pollId);
       if (card.imageMasterUrl && !card.imageVariants)
         add(warnings, "card_variants_pending", `${path}.imageVariants`, "Card image variants are not ready yet.");
     });
@@ -119865,20 +120243,20 @@ function stateWithin(now, window2) {
     return "open";
   return "after";
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function toMillis2(value) {
   if (typeof value === "number" && Number.isFinite(value))
     return value;
-  if (isRecord2(value) && typeof value.toMillis === "function") {
+  if (isRecord3(value) && typeof value.toMillis === "function") {
     const ms = value.toMillis();
     return typeof ms === "number" && Number.isFinite(ms) ? ms : null;
   }
   return null;
 }
 function storedWindow(event) {
-  const billing = isRecord2(event.billing) ? event.billing : {};
+  const billing = isRecord3(event.billing) ? event.billing : {};
   const start = toMillis2(billing.windowStart);
   const end = toMillis2(billing.windowEnd);
   return start !== null && end !== null && end > start ? { windowStart: new Date(start), windowEnd: new Date(end) } : null;
@@ -119887,12 +120265,12 @@ function instantMs(value) {
   return toMillis2(value);
 }
 function windowFromEvent(event, nowMs) {
-  const billing = isRecord2(event.billing) ? event.billing : {};
+  const billing = isRecord3(event.billing) ? event.billing : {};
   const storedStart = toMillis2(billing.windowStart);
   const storedEnd = toMillis2(billing.windowEnd);
   let window2 = storedStart !== null && storedEnd !== null ? { windowStart: new Date(storedStart), windowEnd: new Date(storedEnd) } : null;
   if (!window2) {
-    const meta2 = isRecord2(event.meta) ? event.meta : {};
+    const meta2 = isRecord3(event.meta) ? event.meta : {};
     const eventDateMs = toMillis2(meta2.eventDate);
     if (eventDateMs !== null)
       window2 = showWindow(new Date(eventDateMs));
@@ -119901,18 +120279,18 @@ function windowFromEvent(event, nowMs) {
 }
 
 // build/tools/eventDate.js
-function isRecord3(value) {
+function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function readMeta(event) {
-  return isRecord3(event.meta) ? event.meta : {};
+  return isRecord4(event.meta) ? event.meta : {};
 }
 function judgeEventDateChange(fresh, newValue, nowMs) {
   const newMs = newValue === null ? null : instantMs(newValue);
   const currentMs = instantMs(readMeta(fresh).eventDate);
   if (newMs !== null && currentMs !== null && newMs === currentMs)
     return { allowed: true };
-  const billing = isRecord3(fresh.billing) ? fresh.billing : null;
+  const billing = isRecord4(fresh.billing) ? fresh.billing : null;
   if (!billing || billing.state !== "published" && billing.state !== "held")
     return { allowed: true };
   const window2 = storedWindow(fresh);
@@ -120090,6 +120468,10 @@ function assertFormBindingsExist(fresh, patch) {
   const cardsAffected = orphaned.some((binding) => binding.field.startsWith("blocks.cards."));
   throw new Error(`This call removes a form that buttons still point at: ${listed}. A button bound to a missing form does nothing for viewers, so the removal is refused while something still points at it. Unbind them first: pass promoBanner: {formId: null} and/or primaryCta: {formId: null} in this same call` + (cardsAffected ? ", and clear the card bindings with oko_configure_cards before removing the form." : "."));
 }
+function assertBindingsExist(fresh, patch) {
+  assertFormBindingsExist(fresh, patch);
+  assertPollBindingsExist(fresh, patch);
+}
 function configureBlocksScopes(args) {
   return Object.keys(telegramBlocksPatch(args)).length > 0 ? ["setup:write", "telegram:write"] : ["setup:write"];
 }
@@ -120391,26 +120773,30 @@ function registerEventTools(server2) {
   server2.registerTool("oko_configure_blocks", {
     title: "Configure event blocks",
     description: toolDescription({
-      summary: "Configure supported event setup blocks, forms, and Telegram channel ids.",
+      summary: "Configure supported event setup blocks, forms, polls, and Telegram channel ids.",
       exampleCall: { "eventId": "Kx9pQ2mR7tL4vB8nW3cY", "chat": { "enabled": true }, "promoBanner": { "enabled": false }, "primaryCta": { "enabled": true, "title": "Get the slides", "buttonLabel": "Download", "buttonUrl": "https://example.com/slides" }, "videoPlaceholder": { "enabled": true, "mode": "glass", "showTimer": true, "title": "The webinar starts at 14:00", "subtitle": "Moscow time" } },
       args: [
         "eventId: event to edit.",
         "chat/promoBanner/primaryCta/videoPlaceholder: optional block patches.",
-        "forms: replaces configured lead forms when provided; removing a form that a button still points at is refused.",
+        "forms: replaces configured lead forms when provided; removing a form that a button still points at is refused. Omit to leave the forms (and the polls) untouched.",
+        "polls: replaces configured polls when provided (max 10, each with a question and 2-10 options); omit to leave the polls (and the forms) untouched. Pass every existing poll and option back with its id (oko_get_event shows them) \u2014 an option sent without an id is a NEW option, and the votes of an option are tied to its id. Removing a poll that a button still points at is refused.",
+        "promoBanner.pollId / primaryCta.pollId: the button opens this poll in a popup (a card's pollId is set in oko_configure_cards). A button has one action: link, form or poll. null removes the binding.",
         "telegramChannelIds: replaces configured Telegram channels when provided; needs the telegram:write scope AND the notification permission on the event, and is refused before anything is written when either is missing.",
-        "confirm: only for a call that turns on a paid block (promoBanner, primaryCta, forms) on a PUBLISHED page \u2014 see the note on paid blocks."
+        "confirm: only for a call that turns on a paid block (promoBanner, primaryCta, forms, polls) on a PUBLISHED page \u2014 see the note on paid blocks."
       ],
-      returns: "event id and the list of Firestore fields updated; after a paid block, also payment (charged, balanceAfter) and a hint.",
+      returns: "event id and the list of Firestore fields updated; after polls, the polls as stored (their ids, and the ids of their options); after a paid block, also payment (charged, balanceAfter) and a hint.",
       examples: ["Use after oko_create_webinar to enable chat, bind a CTA/form, and configure other audience blocks."],
       notes: [
-        "\u{1F534} Paid blocks after publication: the promo banner, the CTA and the forms cost 10 lumens each (the cards block is paid in oko_configure_cards; forms are ONE block however many there are) when they are turned on AFTER the page is published. On a draft they are free \u2014 they enter the bill at publication. On a published page, a call that turns one on without confirm writes NOTHING and answers with the quote: the blocks, the lumens, the wallet that pays and who that is. Show the organizer, and repeat the call with confirm: true after they agree; the wallet is charged once for the whole set and only then is the patch written. Turning a block off and on again in the same show costs nothing more, and a block already paid for is not charged again. Refusals carry errorCode and whatToDo: INSUFFICIENT_TOKENS (the wallet that pays \u2014 the workspace owner's \u2014 is short), ENTITLEMENT_REQUIRED (that owner has no live subscription), PAYER_UNRESOLVED, EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH; nothing is written or charged then. The key needs the events:write scope besides setup:write for this. Unpublishing the page later does NOT return these top-up charges.",
+        "\u{1F534} Paid blocks after publication: the promo banner, the CTA, the forms and the polls cost 10 lumens each (the cards block is paid in oko_configure_cards; forms are ONE block however many there are, and so are polls \u2014 the polls are their own block, never part of the forms) when they are turned on AFTER the page is published. On a draft they are free \u2014 they enter the bill at publication. On a published page, a call that turns one on without confirm writes NOTHING and answers with the quote: the blocks, the lumens, the wallet that pays and who that is. Show the organizer, and repeat the call with confirm: true after they agree; the wallet is charged once for the whole set and only then is the patch written. Turning a block off and on again in the same show costs nothing more, and a block already paid for is not charged again. Refusals carry errorCode and whatToDo: INSUFFICIENT_TOKENS (the wallet that pays \u2014 the workspace owner's \u2014 is short), ENTITLEMENT_REQUIRED (that owner has no live subscription), PAYER_UNRESOLVED, EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH; nothing is written or charged then. The key needs the events:write scope besides setup:write for this. Unpublishing the page later does NOT return these top-up charges.",
         '\u{1F534} "Turn off the chat" is ambiguous, and the two meanings are different actions. chat.enabled=false HIDES the chat panel from the page for everyone \u2014 the history is not deleted (messages are kept for 90 days) and comes back when the block is enabled again \u2014 but during or after a webinar that is almost never what is asked for. Stopping new messages is a different tool: oko_set_chat_mode with mode="off" leaves the panel and the history on the page and only closes the input. When the organizer says "turn off the chat", "close the chat", "stop the chat", "mute the chat", "disable chat", assume they mean CLOSING INTAKE (oko_set_chat_mode off), and ask before hiding the panel. The same trap in reverse: "turn the chat back on" after a pause means mode="public", not this field.',
         "A block toggle and its image are independent: enabling a block here works with an image already uploaded via oko_upload_image, and uploading an image never enables the block by itself.",
         "promoBanner has no text field by design: the banner is image+link. blocks.promoBanner.text seen in event documents is legacy and is never rendered on the event page.",
         'videoPlaceholder.enabled only allows the placeholder; viewers see it after oko_set_block_visibility with block "placeholder" and visible true (a live override, stored outside the event document). Chat, CTA, banner and cards appear as soon as they are enabled here.',
         "Setup toggle vs live override: enabled=false removes a block from the page for everyone and persists (its uploaded image stays); oko_set_block_visibility hides or shows an enabled block temporarily and is the tool for the live show. Uploading an image never enables a block.",
         "telegramChannelIds is the only field here that is not a page setting: it decides which channel carries this event's messages, and the automatic reminder goes out under the event owner's name. Omit the field to configure blocks with setup:write alone; pass it only with a key that holds telegram:write and for an organizer who may send notifications for this event.",
-        "forms and the buttons bound to them travel together in both directions: binding a button to a form that does not exist is refused, and so is replacing forms in a way that removes a form the banner, the CTA or a card button still points at. Unbind in the same call with promoBanner/primaryCta formId:null; card bindings are cleared with oko_configure_cards first. A binding that was already broken before the call is not touched and does not block it."
+        "forms and the buttons bound to them travel together in both directions: binding a button to a form that does not exist is refused, and so is replacing forms in a way that removes a form the banner, the CTA or a card button still points at. Unbind in the same call with promoBanner/primaryCta formId:null; card bindings are cleared with oko_configure_cards first. A binding that was already broken before the call is not touched and does not block it. Polls follow the same rule with pollId.",
+        "forms and polls are separate lists: a call with forms never touches polls, and a call with polls never touches forms (leave either argument out to keep that list as it is).",
+        "Polls: a poll opens from a button (promoBanner.pollId, primaryCta.pollId, a card's pollId) and, with the control room, can be launched for everyone from oko_control_poll. Viewers see the results only after the organizer shows them (oko_control_poll show_results). Removing a poll takes it off the page; the votes already cast stay in the data and in the session reports. The vote counts are in oko_get_live_state (live) and oko_get_session_report (per session)."
       ]
     }),
     inputSchema: {
@@ -120422,12 +120808,13 @@ function registerEventTools(server2) {
         closeOnSessionEnd: external_exports.boolean().optional().describe("Session trigger: close message intake when the analytics session ends (default false)."),
         visibility: external_exports.enum(["always", "hidden"]).optional()
       }).optional(),
-      promoBanner: external_exports.object({ enabled: external_exports.boolean().optional(), link: external_exports.string().max(1e3).optional(), visibility: external_exports.enum(["always", "hidden"]).optional(), formId: external_exports.string().nullable().optional() }).optional(),
-      primaryCta: external_exports.object({ enabled: external_exports.boolean().optional(), visibility: external_exports.enum(["always", "hidden"]).optional(), title: external_exports.string().nullable().optional(), text: external_exports.string().nullable().optional(), buttonLabel: external_exports.string().nullable().optional(), buttonUrl: external_exports.string().nullable().optional(), formId: external_exports.string().nullable().optional() }).optional(),
+      promoBanner: external_exports.object({ enabled: external_exports.boolean().optional(), link: external_exports.string().max(1e3).optional(), visibility: external_exports.enum(["always", "hidden"]).optional(), formId: external_exports.string().nullable().optional(), pollId: external_exports.string().regex(POLL_ID_PATTERN).nullable().optional().describe("Opens this poll (an id from polls) when the banner is clicked; null removes the binding.") }).optional(),
+      primaryCta: external_exports.object({ enabled: external_exports.boolean().optional(), visibility: external_exports.enum(["always", "hidden"]).optional(), title: external_exports.string().nullable().optional(), text: external_exports.string().nullable().optional(), buttonLabel: external_exports.string().nullable().optional(), buttonUrl: external_exports.string().nullable().optional(), formId: external_exports.string().nullable().optional(), pollId: external_exports.string().regex(POLL_ID_PATTERN).nullable().optional().describe("Opens this poll (an id from polls) when the CTA button is clicked; null removes the binding.") }).optional(),
       videoPlaceholder: external_exports.object({ enabled: external_exports.boolean().optional(), mode: external_exports.enum(["glass", "image"]).optional(), title: external_exports.string().nullable().optional(), subtitle: external_exports.string().nullable().optional(), showTimer: external_exports.boolean().optional() }).optional(),
       forms: external_exports.array(formSchema).max(20).optional(),
+      polls: external_exports.array(pollSchema).max(MAX_POLLS).optional().describe("Replaces the page's polls. Omit to leave them as they are; [] removes them all."),
       telegramChannelIds: external_exports.array(external_exports.number().int()).max(20).optional(),
-      confirm: external_exports.boolean().optional().describe("Needed only when the call turns on a paid block (banner, CTA, forms) on an already PUBLISHED page: without it nothing is written and the answer is the quote (lumens, who pays); true after the organizer confirmed the charge.")
+      confirm: external_exports.boolean().optional().describe("Needed only when the call turns on a paid block (banner, CTA, forms, polls) on an already PUBLISHED page: without it nothing is written and the answer is the quote (lumens, who pays); true after the organizer confirmed the charge.")
     },
     outputSchema: updateOutputSchema,
     annotations: writeTool
@@ -120457,6 +120844,8 @@ function registerEventTools(server2) {
       patch["blocks.promoBanner.visibility"] = args.promoBanner.visibility;
     if (args.promoBanner?.formId !== void 0)
       patch["blocks.promoBanner.formId"] = args.promoBanner.formId;
+    if (args.promoBanner?.pollId !== void 0)
+      patch["blocks.promoBanner.pollId"] = args.promoBanner.pollId;
     if (args.primaryCta?.enabled !== void 0)
       patch["blocks.primaryCta.enabled"] = args.primaryCta.enabled;
     if (args.primaryCta?.visibility !== void 0)
@@ -120471,6 +120860,8 @@ function registerEventTools(server2) {
       patch["blocks.primaryCta.buttonUrl"] = normalizeCardButtonUrl(args.primaryCta.buttonUrl);
     if (args.primaryCta?.formId !== void 0)
       patch["blocks.primaryCta.formId"] = args.primaryCta.formId;
+    if (args.primaryCta?.pollId !== void 0)
+      patch["blocks.primaryCta.pollId"] = args.primaryCta.pollId;
     if (args.videoPlaceholder?.enabled !== void 0)
       patch["blocks.video.placeholder.enabled"] = args.videoPlaceholder.enabled;
     if (args.videoPlaceholder?.mode !== void 0)
@@ -120503,6 +120894,8 @@ function registerEventTools(server2) {
           ...field2.type === "select" || field2.type === "checkbox" ? { options: [...new Set((field2.options ?? []).map((option) => option.trim()).filter(Boolean))] } : {}
         }))
       }));
+    if (args.polls !== void 0)
+      patch.polls = buildPollsForWrite(args.polls);
     Object.assign(patch, telegramPatch);
     const payment = await settleBlockExtras({
       tool: "oko_configure_blocks",
@@ -120511,11 +120904,11 @@ function registerEventTools(server2) {
       event: current,
       patch,
       confirm: args.confirm,
-      precheck: () => assertFormBindingsExist(current, patch)
+      precheck: () => assertBindingsExist(current, patch)
     });
     if (payment.kind === "quote")
       requireConfirm(args.confirm, "oko_configure_blocks", payment.preview);
-    await writeEventPatchWithCards(args.eventId, patch, null, assertFormBindingsExist);
+    await writeEventPatchWithCards(args.eventId, patch, null, assertBindingsExist);
     const paid = paymentFields(payment);
     const hints = [...paid.hints ?? []];
     if (args.chat?.visibility !== void 0) {
@@ -120544,7 +120937,20 @@ function registerEventTools(server2) {
     if (args.videoPlaceholder?.enabled === false) {
       hints.push('If a live override made the placeholder visible earlier, reset it with oko_set_block_visibility block "placeholder" visible null.');
     }
-    return textResult({ id: args.eventId, updated: Object.keys(patch), ...paid.payment ? { payment: paid.payment } : {}, ...hints.length ? { hints } : {} });
+    const writtenPolls = Array.isArray(patch.polls) ? patch.polls : null;
+    if (writtenPolls && writtenPolls.length > 0) {
+      hints.push("A poll reaches viewers through a button that opens it: bind one with promoBanner.pollId, primaryCta.pollId or a card's pollId (oko_configure_cards). Viewers vote in a popup and see the results only after the organizer shows them (oko_control_poll show_results). Launching a poll for everyone and resetting it need the control room.");
+    }
+    if (writtenPolls && writtenPolls.length === 0) {
+      hints.push("The polls were taken off the page. Votes already cast stay in the data and in the session reports.");
+    }
+    return textResult({
+      id: args.eventId,
+      updated: Object.keys(patch),
+      ...writtenPolls ? { polls: writtenPolls } : {},
+      ...paid.payment ? { payment: paid.payment } : {},
+      ...hints.length ? { hints } : {}
+    });
   });
   server2.registerTool("oko_configure_cards", {
     title: "Configure event cards",
@@ -120556,18 +120962,19 @@ function registerEventTools(server2) {
         "enabled: optional Cards block enabled flag; turning it on for a PUBLISHED page is a paid top-up \u2014 see the note on paid blocks.",
         "visibility: optional default visibility, always or hidden.",
         "cardImageRatio: optional image ratio, one of auto, 1:1, 4:3, 3:2, 16:9, 2:3, 3:4.",
-        "items: optional full replacement array, max 6 cards. Each item may include id, title, text, buttonLabel, buttonUrl, formId.",
+        "items: optional full replacement array, max 6 cards. Each item may include id, title, text, buttonLabel, buttonUrl, formId, pollId.",
         "confirm: only for enabled: true on a published page \u2014 see the note on paid blocks."
       ],
       returns: "event id, updated Firestore fields, normalized cards config, generated card ids, preserved image ids, removed card ids, and warnings; after a paid top-up, also payment (charged, balanceAfter) and a hint.",
       examples: [
         "Use after oko_create_webinar to create cards before uploading per-card images.",
         "Call oko_get_event first and pass the full desired items array when editing existing cards.",
-        "Use formId instead of buttonUrl when a card button should open a lead form."
+        "Use formId instead of buttonUrl when a card button should open a lead form, and pollId when it should open a poll (an id from oko_configure_blocks polls)."
       ],
       notes: [
         "\u{1F534} Paid block after publication: the Cards block costs 10 lumens (one block however many cards) when it is turned on AFTER the page is published; on a draft it is free \u2014 it enters the bill at publication. On a published page, enabled: true without confirm writes NOTHING (not the card list either) and answers with the quote: the lumens and the wallet that pays. Show the organizer, and repeat the call with confirm: true after they agree; the wallet is charged once and only then is the patch written. A block already paid for, or turned off and on again in the same show, is not charged twice. Refusals carry errorCode and whatToDo: INSUFFICIENT_TOKENS, ENTITLEMENT_REQUIRED, PAYER_UNRESOLVED, EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH; nothing is written or charged then. The key needs the events:write scope besides setup:write for this. Unpublishing the page later does NOT return top-up charges.",
         "This tool replaces blocks.cards.items when items is provided; omitted text fields become null.",
+        "A card button has ONE action: buttonUrl, formId or pollId. The bindings travel with the cards you send: pass formId and pollId back as oko_get_event shows them, or the card loses its binding. A binding the replacement drops is named in warnings (the write still goes through); a pollId that is not in the page's polls is refused.",
         "Existing card images are preserved only when the same card id remains in the replacement list.",
         "buttonUrl allows http(s), mailto, or tel URLs; javascript/data URLs are rejected.",
         "If a removed card had an image, Storage cleanup is not automatic; this matches the web Setup behavior."
@@ -120599,6 +121006,7 @@ function registerEventTools(server2) {
     const preservedImageCardIds = [];
     let removedCardIds = [];
     let removedCardsWithImages = [];
+    let droppedBindings = [];
     if (args.enabled !== void 0)
       patch["blocks.cards.enabled"] = args.enabled;
     if (args.visibility !== void 0)
@@ -120610,13 +121018,15 @@ function registerEventTools(server2) {
       const built = buildCardsItems({
         inputs: args.items,
         existing: freshCards.items,
-        formIds: eventFormIds(fresh)
+        formIds: eventFormIds(fresh),
+        pollIds: eventPollIds(fresh)
       });
       finalCards.items = built.items;
       generatedCardIds.length = 0;
       preservedImageCardIds.length = 0;
       generatedCardIds.push(...built.generatedCardIds);
       preservedImageCardIds.push(...built.preservedImageCardIds);
+      droppedBindings = built.droppedBindings;
       const nextIds = new Set(built.items.map((item) => item.id));
       const removed = freshCards.items.filter((item) => !nextIds.has(item.id));
       removedCardIds = removed.map((item) => item.id);
@@ -120641,6 +121051,9 @@ function registerEventTools(server2) {
     }
     const paid = paymentFields(payment);
     const warnings = removedCardsWithImages.length > 0 ? [`Removed cards had images and their Storage files were not deleted: ${removedCardsWithImages.join(", ")}.`] : [];
+    for (const dropped of droppedBindings) {
+      warnings.push(`Card ${dropped.cardId} no longer opens the ${dropped.kind} "${dropped.targetId}": the replacement item did not carry ${dropped.kind === "poll" ? "pollId" : "formId"}. If that was not intended, repeat the call with ${dropped.kind === "poll" ? "pollId" : "formId"}: "${dropped.targetId}" on that card.`);
+    }
     if (finalCards.repairedIdPositions.length > 0) {
       warnings.push(`Cards at position(s) ${finalCards.repairedIdPositions.join(", ")} had no usable id in Firestore; a temporary one was generated, so their previous images could not be matched and were dropped. Re-upload images for these cards.`);
       if (args.items === void 0) {
@@ -120956,22 +121369,12 @@ function registerLeadTools(server2) {
 // build/tools/unpublication.js
 var TOOL2 = "oko_unpublish_event";
 var NOTHING_WILL_CHANGE = "The page and its lumens stay exactly as they are now.";
-function isRecord4(value) {
+function isRecord5(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function refusal4(eventId, body) {
   return { ...textResult({ tool: TOOL2, eventId, ...body }), isError: true };
 }
-function notPublishedRefusal(eventId) {
-  return refusal4(eventId, {
-    errorCode: "NOT_PUBLISHED",
-    message: `This page has no publication to withdraw. ${NOTHING_WILL_CHANGE}`,
-    whatToDo: [
-      "Explain that only a published page can be unpublished; a draft needs no withdrawal.",
-      "Do not call with confirm:true: the answer will not change."
-    ]
-  });
-}
 function dateRequiredRefusal(eventId) {
   return refusal4(eventId, {
     errorCode: "DATE_REQUIRED",
@@ -121001,20 +121404,48 @@ function topUpsPaid(billing) {
   if (!Array.isArray(additions))
     return 0;
   return additions.reduce((sum, item) => {
-    const amount = isRecord4(item) ? item[ADDITION_AMOUNT_FIELD] : null;
+    const amount = isRecord5(item) ? item[ADDITION_AMOUNT_FIELD] : null;
     return sum + (typeof amount === "number" && Number.isFinite(amount) && amount > 0 ? amount : 0);
   }, 0);
 }
 function topUpsNote(topUps) {
   return topUps > 0 ? `The ${topUps} lumens paid on top of the publication (blocks and control room turned on after it) are NOT returned; publishing again bills those blocks in the new show's bill.` : "";
 }
+var REFUND_UP_TO_NOTE = "Part of the charge may not come back: lumens that would already have burned by now (their plan period is over) are forfeited, not returned. The exact figures are known only after confirmation: the answer carries `refunded` (what came back to the wallet) and `forfeited` (what did not).";
+function forfeitedNote(forfeited) {
+  return forfeited > 0 ? `${forfeited} lumens of the charge were not returned (forfeited): lumens that would already have burned by now come back nowhere.` : "";
+}
+function forfeitedOf(outcome) {
+  const value = outcome.forfeited;
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+function unpublishPreviewNote(topUps) {
+  return [
+    "Unpublishing takes the page back to draft and returns UP TO the publication charge (`refundUpTo`) to the wallet that paid; the live layer (chat, presence, session start) closes immediately.",
+    REFUND_UP_TO_NOTE,
+    "If the page only needs another date inside its show window, oko_update_event moves it with no refund and no new charge \u2014 prefer that to unpublishing.",
+    topUpsNote(topUps)
+  ].filter(Boolean).join(" ");
+}
+function unpublishAnswerHints(outcome, topUps) {
+  const refunded = typeof outcome.refunded === "number" ? outcome.refunded : 0;
+  const forfeited = forfeitedOf(outcome);
+  if (refunded > 0) {
+    return [
+      `${refunded} lumens were refunded to payerUid ${safeString(outcome.payerUid)}.`,
+      forfeitedNote(forfeited),
+      ...topUps > 0 ? [topUpsNote(topUps)] : []
+    ].filter(Boolean);
+  }
+  if (outcome.alreadyUnpublished === true)
+    return ["The page was already a draft \u2014 nothing was refunded now."];
+  return [forfeitedNote(forfeited)].filter(Boolean);
+}
 function previewUnpublish(eventId, event, nowMs) {
-  const billing = isRecord4(event.billing) ? event.billing : {};
+  const billing = isRecord5(event.billing) ? event.billing : {};
   const state2 = billing.state === "published" || billing.state === "held" ? billing.state : "unpublished";
   if (state2 === "unpublished")
     return { kind: "already" };
-  if (state2 !== "published" && state2 !== "held")
-    return { kind: "refuse", result: notPublishedRefusal(eventId) };
   const window2 = windowFromEvent(event, nowMs);
   if (state2 === "held") {
     return { kind: "refuse", result: windowOpenRefusal(eventId, "after", window2?.window.windowStart ?? null) };
@@ -121067,20 +121498,21 @@ function registerUnpublicationTools(server2) {
   server2.registerTool("oko_unpublish_event", {
     title: "Unpublish event page",
     description: toolDescription({
-      summary: `Take a published OKO event page back to draft and refund its publication charge. Works only before the page's show window opens; once it has opened (or the page shows "held"/\u041F\u0440\u043E\u0432\u0435\u0434\u0435\u043D\u043E), the page stays published for good. Without confirm nothing is written: the call returns a preview \u2014 what will happen and how many lumens come back to which wallet, or the refusal if it cannot be done now. Built from the event document, not a server round trip: CF61 has no dry run of its own. With confirm: true the page becomes a draft and the charge is refunded in one step.`,
+      summary: `Take a published OKO event page back to draft and refund its publication charge. Works only before the page's show window opens; once it has opened (or the page shows "held"/\u041F\u0440\u043E\u0432\u0435\u0434\u0435\u043D\u043E), the page stays published for good. Without confirm nothing is written: the call returns a preview \u2014 what will happen and UP TO how many lumens come back (refundUpTo) to which wallet, or the refusal if it cannot be done now. Built from the event document, not a server round trip, so it cannot tell how much of the charge was forfeited (lumens that would already have burned): the exact refunded and forfeited figures come only after confirm. With confirm: true the page becomes a draft and the refund (up to the charge) is paid in one step.`,
       args: [
         "eventId: event to unpublish.",
         "confirm: true only after the organizer has seen the preview and agreed."
       ],
-      returns: "status unpublished with alreadyUnpublished, refunded, balanceAfter, mirrorsUpdated, plus title, links and hints.",
-      examples: ["Call without confirm, show the organizer what will be refunded and to whom, and call again with confirm: true after explicit consent."],
+      returns: "status unpublished with alreadyUnpublished, refunded (what came back), forfeited (what did not, only when above zero), balanceAfter, mirrorsUpdated, plus title, links and hints. The preview (no confirm) carries refundUpTo, not refunded.",
+      examples: ["Call without confirm, show the organizer UP TO how much comes back and to whom (never promise the whole charge), and call again with confirm: true after explicit consent; then tell the exact refunded and forfeited."],
       notes: [
         "Refunds go to the wallet that paid for this publication (billing.payerUid), which may not be the organizer behind this key in a shared workspace.",
+        "The refund is UP TO the charge: the share of it drawn from lumens that would already have burned (their plan period is over) is forfeited. The preview cannot see that, so it says refundUpTo; the answer after confirm says refunded and forfeited.",
         "Only the publication charge comes back. Lumens paid AFTER publication for blocks and the control room turned on later (oko_configure_blocks, oko_configure_cards with confirm) are NOT returned: the preview names them as topUpsNotRefunded, and publishing again bills those blocks in the new show's bill.",
         "Publishing again afterwards (oko_publish_event) is a new show and a new charge, with a fresh show window from the new date.",
-        "This is how the event date moves on a published page: unpublish (refund), change the date with oko_update_event, publish again (new charge) \u2014 oko_update_event refuses to move the date directly while the page stays published (EVENT_DATE_LOCKED).",
+        "A date INSIDE the page's show window moves with oko_update_event directly, with no refund and no new charge \u2014 prefer that when the charge may be partly forfeited. A date outside the window: unpublish (refund, up to the charge), change the date with oko_update_event, publish again (new charge); oko_update_event refuses the move otherwise (EVENT_DATE_LOCKED).",
         "One rule for every page: an old page that paid nothing is unpublished the same way before its window opens (the refund is 0 lumens) and refused the same way once it has taken place (WINDOW_OPEN, windowState after).",
-        "Refusals carry errorCode and whatToDo: NOT_PUBLISHED, DATE_REQUIRED, WINDOW_OPEN, EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH."
+        "Refusals carry errorCode and whatToDo: DATE_REQUIRED, WINDOW_OPEN, EDIT_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH. A page that is already a draft is not a refusal: the call answers alreadyUnpublished."
       ]
     }),
     inputSchema: {
@@ -121115,13 +121547,13 @@ function registerUnpublicationTools(server2) {
         requireConfirm(confirm, TOOL2, {
           eventId,
           title,
-          refunded: preview.tokensCharged,
+          refundUpTo: preview.tokensCharged,
           topUpsNotRefunded: preview.topUps,
           payerUid: preview.payerUid,
           showId: preview.showId,
           windowStart: preview.windowStart,
           windowEnd: preview.windowEnd,
-          note: ["Unpublishing returns this page's publication charge to the wallet that paid and takes the page back to draft; the live layer (chat, presence, session start) closes immediately.", topUpsNote(preview.topUps)].filter(Boolean).join(" ")
+          note: unpublishPreviewNote(preview.topUps)
         });
       }
     }
@@ -121135,9 +121567,7 @@ function registerUnpublicationTools(server2) {
         throw new ToolRefusal(named);
       throw error3;
     }
-    const refunded = typeof outcome.refunded === "number" ? outcome.refunded : 0;
-    const topUps = topUpsPaid(isRecord4(event.billing) ? event.billing : {});
-    const hints = refunded > 0 ? [`${refunded} lumens were refunded to payerUid ${safeString(outcome.payerUid)}.`, ...topUps > 0 ? [topUpsNote(topUps)] : []] : outcome.alreadyUnpublished === true ? ["The page was already a draft \u2014 nothing was refunded now."] : [];
+    const hints = unpublishAnswerHints(outcome, topUpsPaid(isRecord5(event.billing) ? event.billing : {}));
     return textResult({
       ...outcome,
       title,
@@ -121151,7 +121581,8 @@ function registerUnpublicationTools(server2) {
 var TRASH_OUTPUT_SCHEMA = external_exports.object({
   trashed: external_exports.string(),
   purgeAfter: external_exports.number().nullable(),
-  refunded: external_exports.number().nonnegative().optional()
+  refunded: external_exports.number().nonnegative().optional(),
+  forfeited: external_exports.number().nonnegative().optional()
 }).passthrough();
 function trashRefundWarning(event, nowMs) {
   const billing = event.billing && typeof event.billing === "object" && !Array.isArray(event.billing) ? event.billing : null;
@@ -121160,9 +121591,17 @@ function trashRefundWarning(event, nowMs) {
   const window2 = windowFromEvent(event, nowMs);
   if (window2 !== null && window2.state !== "before")
     return null;
-  const charge = typeof billing.tokensCharged === "number" ? `${billing.tokensCharged} lumens` : "its lumens";
+  const charge = typeof billing.tokensCharged === "number" ? `${billing.tokensCharged} lumens` : "what the publication paid";
   const topUps = topUpsNote(topUpsPaid(billing));
-  return `This page is published. Moving it to the trash also unpublishes it and refunds ${charge} to the wallet that paid, because its show window has not opened yet.${topUps ? ` ${topUps}` : ""}`;
+  return `This page is published. Moving it to the trash also unpublishes it and returns up to ${charge} to the wallet that paid, because its show window has not opened yet. ${REFUND_UP_TO_NOTE}${topUps ? ` ${topUps}` : ""}`;
+}
+function trashAnswerHints(data) {
+  const refunded = typeof data.refunded === "number" ? data.refunded : 0;
+  const forfeited = forfeitedOf(data);
+  return [
+    ...refunded > 0 ? [`${refunded} lumens were refunded to the wallet that paid for this page's publication: it was still inside its show window when it was trashed.`] : [],
+    ...forfeited > 0 ? [forfeitedNote(forfeited)] : []
+  ];
 }
 function registerLifecycleTools(server2) {
   const moveToTrash = async (toolName, { eventId, confirm }) => {
@@ -121177,7 +121616,7 @@ function registerLifecycleTools(server2) {
     const trash = httpsCallable(functions, "trashEvent");
     const data = (await trash({ eventId })).data;
     const refunded = typeof data.refunded === "number" ? data.refunded : 0;
-    const hints = refunded > 0 ? [`${refunded} lumens were refunded to the wallet that paid for this page's publication: it was still inside its show window when it was trashed.`] : [];
+    const hints = trashAnswerHints(data);
     return textResult({ ...data, refunded, ...hints.length ? { hints } : {} });
   };
   server2.registerTool("oko_delete_event", {
@@ -121189,7 +121628,7 @@ function registerLifecycleTools(server2) {
       examples: ["Use after showing the exact event title and asking the organizer to confirm moving it to trash."],
       notes: [
         "Recoverable for 30 days with oko_restore_event. This does not create an event lifecycle status.",
-        "A published, paid page still inside its show window is also unpublished and its charge refunded; the preview (without confirm) names it in `warning`, and the answer's `refunded` field says how much came back."
+        "A published, paid page still inside its show window is also unpublished and UP TO its charge refunded; the preview (without confirm) names it in `warning`, and the answer's `refunded` field says how much came back (`forfeited`, when above zero, how much did not)."
       ]
     }),
     inputSchema: { eventId: eventIdField, confirm: external_exports.boolean().optional().describe("Required true to move the event to trash.") },
@@ -121205,7 +121644,7 @@ function registerLifecycleTools(server2) {
       examples: ["Use after showing the exact event title and asking the organizer to confirm moving it to trash."],
       notes: [
         "End any active analytics session first. Restore with oko_restore_event before the purge deadline.",
-        "A published, paid page still inside its show window is also unpublished and its charge refunded; the preview (without confirm) names it in `warning`, and the answer's `refunded` field says how much came back."
+        "A published, paid page still inside its show window is also unpublished and UP TO its charge refunded; the preview (without confirm) names it in `warning`, and the answer's `refunded` field says how much came back (`forfeited`, when above zero, how much did not)."
       ]
     }),
     inputSchema: { eventId: eventIdField, confirm: external_exports.boolean().optional().describe("Required true to move the event to trash.") },
@@ -121269,7 +121708,7 @@ function registerLifecycleTools(server2) {
       returns: "new event id, public/setup/analytics URLs, source event id, and workspaceId.",
       examples: ["Use to create a reusable copy of a configured webinar before editing the new copy."],
       notes: [
-        "Copies title, video, meta, blocks, forms, and Telegram config; does not copy analytics sessions, leads, or the publication \u2014 the copy is a new page, born a draft.",
+        "Copies title, video, meta, blocks, forms, polls, and Telegram config; does not copy analytics sessions, leads, poll votes (the copy starts round 1 with no votes), or the publication \u2014 the copy is a new page, born a draft.",
         "Live overrides are NOT copied: the copy starts with chat mode public and the placeholder hidden, whatever the source had. Set them again with oko_set_chat_mode and oko_set_block_visibility on the new event.",
         "Requires only events:write plus createEvents in the target workspace. To move (not copy) an event, use oko_move_event with the same scope.",
         "Telegram config is copied only when the key holds telegram:write AND the organizer may send notifications for the source event; otherwise the copy starts with Telegram off and a hint says so. Deciding which channel carries an event is a send permission, not a setup one."
@@ -121397,6 +121836,275 @@ function killSwitchHint(state2) {
   return null;
 }
 
+// build/tools/polls.js
+var TOOL3 = "oko_control_poll";
+function refusal5(eventId, pollId, body) {
+  return { ...textResult({ tool: TOOL3, eventId, ...pollId ? { pollId } : {}, ...body }), isError: true };
+}
+var POLL_ACTION_EFFECT = {
+  close: "Voting closes: viewers who open the poll are told it is closed, and a popup that was launched for everyone is put out.",
+  open: "Voting opens again: viewers can vote in the current round.",
+  show_results: "Viewers see the results of the current round (the bars and the shares, refreshed every couple of seconds). Without this only the organizer sees the count.",
+  hide_results: "Viewers no longer see the results; only the organizer sees the count.",
+  launch: "The poll pops up for every viewer who has not voted in this round (and for those who join while it is launched); a viewer who closes it does not see it again until the next launch. Voting is opened if it was closed.",
+  stop: "The popup is put out for everyone. Viewers can still open the poll from its button.",
+  reset: "A new round starts: the count is zero, every viewer may vote again, and the popup and the results are put out. The votes of the earlier rounds stay in the data and in the session reports."
+};
+function needsControlRoom(action) {
+  return CONTROL_ROOM_POLL_ACTIONS.includes(action);
+}
+var CONTROL_ROOM_NOTE = `launch and reset use the live control room of this show (${CONTROL_ROOM_LUMENS} lumens, Pro plan and above), which the organizer buys with the "Enable control room" button in the event's analytics \u2014 no MCP tool buys it. When the control room is not open for the show, OKO refuses with CONTROL_ROOM_REQUIRED and changes nothing. close, open, show_results, hide_results and stop need no control room on any plan.`;
+function planPollCommand(args) {
+  const { eventId, event, pollId, action, state: state2 } = args;
+  const poll = parseEventPolls(event.polls).find((item) => item.id === pollId);
+  if (!poll) {
+    const incomplete = pollIdSet(event.polls).has(pollId);
+    throw new ToolRefusal(refusal5(eventId, pollId, incomplete ? {
+      errorCode: "POLL_NOT_READY",
+      message: "This poll is on the page but is not complete (a question and 2 to 10 options are needed), so OKO does not serve it and cannot command it. Nothing was changed.",
+      whatToDo: [
+        "Complete the poll with oko_configure_blocks polls (pass the poll with its id, a question and at least two options), then repeat.",
+        "Do not retry as is: the answer will not change until the poll is complete."
+      ]
+    } : {
+      errorCode: "POLL_NOT_FOUND",
+      message: "The page has no poll with this id. Nothing was changed.",
+      whatToDo: [
+        "Read the ids with oko_get_event (polls[].id) or create the poll with oko_configure_blocks polls, then repeat.",
+        "Do not retry as is: the answer will not change until the poll exists."
+      ]
+    }));
+  }
+  return {
+    poll,
+    preview: {
+      eventId,
+      pollId,
+      question: poll.question,
+      action,
+      effect: POLL_ACTION_EFFECT[action],
+      needsControlRoom: needsControlRoom(action),
+      // A state that could not be read is `null`, never the defaults: «round 1, open» would be a guess.
+      currentState: state2,
+      ...state2 === null ? { currentStateNote: `The state of the poll could not be read just now${args.stateUnreadable ? ` (${args.stateUnreadable})` : ""}; the command is judged by the server all the same.` } : {},
+      note: needsControlRoom(action) ? `Nothing has been sent yet. ${CONTROL_ROOM_NOTE}` : "Nothing has been sent yet."
+    }
+  };
+}
+function controlPollRefusalResult(eventId, pollId, error3) {
+  if (!error3 || typeof error3 !== "object")
+    return null;
+  const { code, message, details } = error3;
+  if (typeof code !== "string" || !code.startsWith("functions/"))
+    return null;
+  const info = asRecord(details);
+  const text = safeString(message);
+  if (info.reason === "control_room_required") {
+    return refusal5(eventId, pollId, {
+      errorCode: "CONTROL_ROOM_REQUIRED",
+      message: "OKO refused this command: launching a poll for everyone and resetting its count use the live control room, and this show has not bought it. Nothing was changed.",
+      whatToDo: [
+        `Tell the organizer: the control room of a show costs ${CONTROL_ROOM_LUMENS} lumens and needs the Pro plan or higher; they buy it with the "Enable control room" button in the event's analytics. No MCP tool buys it.`,
+        "Offer what needs no control room: show_results (viewers see the bars), close, open, hide_results, stop \u2014 and the poll stays available from its button for everyone.",
+        "Do not retry as is: the answer will not change until the control room is bought."
+      ]
+    });
+  }
+  if (info.reason === "not_published") {
+    return refusal5(eventId, pollId, {
+      errorCode: "PAGE_NOT_PUBLISHED",
+      message: "OKO refused this command: launching and resetting need a published page, because a draft has no viewers. Nothing was changed.",
+      whatToDo: [
+        "Publish the page first: oko_publish_event without confirm shows the bill, then again with confirm:true.",
+        "Do not retry as is: the answer will not change until the page is published."
+      ]
+    });
+  }
+  if (code === "functions/permission-denied") {
+    if (/live permission/i.test(text))
+      return livePermissionRejectionResult(TOOL3, { eventId });
+    if (/scope|no longer grants/i.test(text))
+      return scopeRejectionResult(TOOL3, "live:control");
+    return null;
+  }
+  if (code === "functions/not-found") {
+    return /poll/i.test(text) ? refusal5(eventId, pollId, {
+      errorCode: "POLL_NOT_FOUND",
+      message: "The page has no poll with this id (or the poll is not complete, so OKO does not serve it). Nothing was changed.",
+      whatToDo: ["Read the polls with oko_get_event (polls[]) and repeat with a complete poll's id."]
+    }) : refusal5(eventId, null, {
+      errorCode: "EVENT_NOT_FOUND",
+      message: "Event not found.",
+      whatToDo: ["Check the id: oko_list_my_events lists the events this organizer can see."]
+    });
+  }
+  if (code === "functions/failed-precondition" && /trash/i.test(text))
+    return eventInTrashRefusal(eventId, TOOL3);
+  if (code === "functions/aborted") {
+    return refusal5(eventId, pollId, {
+      errorCode: "POLL_CHANGED_AT_THE_SAME_MOMENT",
+      message: "Another command reached the same poll at the same moment, so this one was not applied. Nothing was lost.",
+      whatToDo: [
+        "Read the poll's state with oko_get_live_state (polls[]) and repeat the command only if it is still needed."
+      ]
+    });
+  }
+  return null;
+}
+function pollsLiveFrom(args) {
+  const { event, states, tallies } = args;
+  const raw = Array.isArray(event.polls) ? event.polls : [];
+  const served = parseEventPolls(event.polls);
+  const hints = [];
+  if (served.length < Math.min(raw.length, 10)) {
+    hints.push(`${Math.min(raw.length, 10) - served.length} poll(s) on the page are not served (incomplete, or a repeated id): they are not listed here. oko_validate_event_setup names them.`);
+  }
+  if (served.length === 0)
+    return { polls: [], read: "none", hints };
+  const nodes = states.kind === "read" && states.node && typeof states.node === "object" && !Array.isArray(states.node) ? states.node : {};
+  let unreadable = 0;
+  const polls = served.map((poll) => {
+    const state2 = states.kind === "read" ? Object.hasOwn(nodes, poll.id) ? readPollState(nodes[poll.id]) : { ...DEFAULT_POLL_CTRL } : null;
+    const tallyRead = tallies.get(poll.id);
+    if (state2 === null || !tallyRead || tallyRead.kind === "unreadable") {
+      unreadable += 1;
+      return { pollId: poll.id, question: poll.question, multiple: poll.multiple, state: state2, tally: null };
+    }
+    const tally = readPollTally(tallyRead.node);
+    const known = new Set(poll.options.map((option) => option.id));
+    const removed = Object.entries(tally.options).filter(([id]) => !known.has(id)).map(([id, count]) => ({ id, count }));
+    return {
+      pollId: poll.id,
+      question: poll.question,
+      multiple: poll.multiple,
+      state: state2,
+      tally: {
+        round: state2.round,
+        total: tally.total,
+        options: poll.options.map((option) => ({ id: option.id, text: option.text, count: Object.hasOwn(tally.options, option.id) ? tally.options[option.id] ?? 0 : 0 })),
+        ...removed.length > 0 ? { removedOptions: removed } : {}
+      }
+    };
+  });
+  const read = unreadable === 0 ? "ok" : unreadable === polls.length ? "unreadable" : "partial";
+  if (read !== "ok") {
+    const reasons = [
+      ...states.kind === "unreadable" ? [states.reason] : [],
+      ...[...tallies.values()].flatMap((item) => item.kind === "unreadable" ? [item.reason] : [])
+    ];
+    hints.push(`${unreadable} of ${polls.length} poll(s) could not be read from the show (${[...new Set(reasons)].join("; ") || "no answer"}): their state or count is null, which is NOT zero. Repeat the call; do not report a count from a null.`);
+  }
+  hints.push("polls[].tally is the live count of the CURRENT round of each poll, shared by the whole page across sessions. The server raises it at every vote and recounts it from the votes at the end of a session, so it can be a vote short in between; the figures of one session are in oko_get_session_report.");
+  return { polls, read, hints };
+}
+async function readPollsLive(eventId, event) {
+  const served = parseEventPolls(event.polls);
+  if (served.length === 0)
+    return pollsLiveFrom({ event, states: { kind: "read", node: null }, tallies: /* @__PURE__ */ new Map() });
+  let states;
+  try {
+    states = { kind: "read", node: (await get(ref(rtdb, `events/${eventId}/pollState`))).val() };
+  } catch (error3) {
+    states = { kind: "unreadable", reason: error3 instanceof Error ? error3.message : String(error3) };
+  }
+  const tallies = /* @__PURE__ */ new Map();
+  if (states.kind === "read") {
+    const nodes = states.node && typeof states.node === "object" && !Array.isArray(states.node) ? states.node : {};
+    await Promise.all(served.map(async (poll) => {
+      const round = Object.hasOwn(nodes, poll.id) ? readPollState(nodes[poll.id]).round : DEFAULT_POLL_CTRL.round;
+      try {
+        tallies.set(poll.id, { kind: "read", node: (await get(ref(rtdb, `events/${eventId}/pollTally/${poll.id}/${round}`))).val() });
+      } catch (error3) {
+        tallies.set(poll.id, { kind: "unreadable", reason: error3 instanceof Error ? error3.message : String(error3) });
+      }
+    }));
+  }
+  return pollsLiveFrom({ event, states, tallies });
+}
+async function readPollStateForPreview(eventId, pollId) {
+  try {
+    const node = (await get(ref(rtdb, `events/${eventId}/pollState/${pollId}`))).val();
+    return { state: readPollState(node) };
+  } catch (error3) {
+    return { state: null, stateUnreadable: error3 instanceof Error ? error3.message : String(error3) };
+  }
+}
+function pollCommandHints(action, state2) {
+  const hints = [POLL_ACTION_EFFECT[action]];
+  if (action === "reset")
+    hints.push(`The poll is now in round ${state2.round}.`);
+  if (action === "launch" || action === "open")
+    hints.push("Voting is open.");
+  return hints;
+}
+var callControlPoll = async (request) => {
+  const call2 = httpsCallable(functions, "controlPoll");
+  return (await call2(request)).data;
+};
+async function sendPollCommand(request, call2 = callControlPoll) {
+  let answer;
+  try {
+    answer = await call2(request);
+  } catch (error3) {
+    const named = controlPollRefusalResult(request.eventId, request.pollId, error3);
+    if (named)
+      throw new ToolRefusal(named);
+    throw error3;
+  }
+  return readPollState(answer.state);
+}
+function registerPollTools(server2) {
+  server2.registerTool("oko_control_poll", {
+    title: "Control a poll",
+    description: toolDescription({
+      summary: "Command one poll of an event during the show: close or reopen voting, show or hide the results to viewers, launch it as a popup for everyone, stop the popup, or reset the count (a new round). Without confirm nothing is sent: the call asks for confirmation and its preview says what viewers will get.",
+      exampleCall: { eventId: "Kx9pQ2mR7tL4vB8nW3cY", pollId: "p-1b2c3d4e", action: "show_results", confirm: true },
+      args: [
+        "eventId: event whose poll to command.",
+        "pollId: the poll's id (oko_get_event \u2192 polls[].id).",
+        `action: ${POLL_ACTIONS.join(" | ")}.`,
+        "confirm: must be true \u2014 every command changes what viewers see or can do right now."
+      ],
+      returns: "eventId, pollId, action and the poll's state after the command (closed, live, liveAt, resultsShown, round), plus hints.",
+      examples: [
+        "Use show_results when the organizer says to show the results; hide_results to take them down.",
+        "Use launch to pop the poll up for everyone (control room); reset to start a new round with the count at zero (control room).",
+        "Read the current count with oko_get_live_state (polls[])."
+      ],
+      notes: [
+        `Needs the live:control scope and the right to control the show (control live) on the event. ${CONTROL_ROOM_NOTE}`,
+        "close puts out a launched popup and stops votes (open lets them in again); show_results and hide_results decide whether VIEWERS see the bars \u2014 the organizer always sees the count; stop only puts the popup out.",
+        "reset starts a new round: viewers may vote again and the count restarts at zero. Nothing is deleted \u2014 the votes of the earlier rounds stay in the data and in the session reports.",
+        "Refusals carry errorCode and whatToDo: CONTROL_ROOM_REQUIRED, PAGE_NOT_PUBLISHED (launch and reset on a draft), POLL_NOT_FOUND, POLL_NOT_READY, POLL_CHANGED_AT_THE_SAME_MOMENT, LIVE_PERMISSION_REQUIRED, EVENT_NOT_FOUND, EVENT_IN_TRASH. Nothing was changed after any of them; relay them and do not retry as is."
+      ]
+    }),
+    inputSchema: {
+      eventId: eventIdField,
+      pollId: external_exports.string().regex(POLL_ID_PATTERN).describe("Id of a poll of the event (oko_get_event \u2192 polls[].id)."),
+      action: external_exports.enum(POLL_ACTIONS).describe("The command."),
+      confirm: external_exports.boolean().optional().describe("Required true to send the command.")
+    },
+    outputSchema: basicEventOutputSchema,
+    // Not idempotent: a second `reset` is another round and a second `launch` is another popup (`liveAt` moves).
+    annotations: writeTool
+  }, async ({ eventId, pollId, action, confirm }) => {
+    const { uid } = await authed(["live:control"]);
+    const event = await readEvent(eventId, uid, "live");
+    const plan = planPollCommand({ eventId, event, pollId, action, ...await readPollStateForPreview(eventId, pollId) });
+    requireConfirm(confirm, "oko_control_poll", plan.preview);
+    const state2 = await sendPollCommand({ eventId, pollId, action });
+    return textResult({
+      eventId,
+      pollId,
+      action,
+      question: plan.poll.question,
+      state: state2,
+      hints: pollCommandHints(action, state2),
+      ...eventLinks(eventId)
+    });
+  });
+}
+
 // build/tools/live.js
 var CHAT_LIVE_SETTINGS = ["mode", "slowModeMs", "automodEnabled", "allowViewerLinks"];
 async function writeChatControl(eventId, mode) {
@@ -121408,7 +122116,7 @@ function registerLiveTools(server2) {
     description: toolDescription({
       summary: "Read main RTDB live controls, aggregate analytics, and chat settings for an event.",
       args: ["eventId: event to inspect."],
-      returns: "eventId, agg metrics, ctrl live overrides, chat settings (mode, slowModeMs, automodEnabled, allowViewerLinks, plus accepting \u2014 whether message intake is open right now, as the server enforces it), and analyticsPaused \u2014 true/false, or null when the platform's kill switch could not be read. ctrl.chatMode is the live control for message intake: public, off, or absent (then the event's starting state blocks.chat.intake applies and accepting shows the result). ctrl.<block>Visible is an override; when it is absent the block follows its setup default \u2014 oko_get_event \u2192 live gives the resolved visibleNow per block.",
+      returns: "eventId, agg metrics, ctrl live overrides, chat settings (mode, slowModeMs, automodEnabled, allowViewerLinks, plus accepting \u2014 whether message intake is open right now, as the server enforces it), polls (one entry per poll the page serves: its state \u2014 closed, live, liveAt, resultsShown, round \u2014 and the live count of the current round per option; a figure that could not be read is null, never zero) with pollsRead ok|partial|unreadable|none, and analyticsPaused \u2014 true/false, or null when the platform's kill switch could not be read. ctrl.chatMode is the live control for message intake: public, off, or absent (then the event's starting state blocks.chat.intake applies and accepting shows the result). ctrl.<block>Visible is an override; when it is absent the block follows its setup default \u2014 oko_get_event \u2192 live gives the resolved visibleNow per block.",
       examples: ["Use during a webinar before changing live block visibility or starting/ending sessions."],
       notes: [
         "Live state does not carry the event team: to see who has access to an event and with which permissions, use oko_list_workspace_access on the event's workspace."
@@ -121419,11 +122127,12 @@ function registerLiveTools(server2) {
     annotations: readOnlyTool
   }, async ({ eventId }) => {
     const { uid } = await authed(["analytics:read"]);
-    await readEvent(eventId, uid, "analytics");
-    const [aggSnap, ctrlSnap, killSwitch, ...chatSnaps] = await Promise.all([
+    const event = await readEvent(eventId, uid, "analytics");
+    const [aggSnap, ctrlSnap, killSwitch, pollsLive, ...chatSnaps] = await Promise.all([
       get(ref(rtdb, `events/${eventId}/agg`)),
       get(ref(rtdb, `events/${eventId}/ctrl`)),
       readKillSwitch(eventId),
+      readPollsLive(eventId, event),
       ...CHAT_LIVE_SETTINGS.map((field2) => get(ref(chatRtdb, `settings/${eventId}/${field2}`)))
     ]);
     const chat = {};
@@ -121439,12 +122148,15 @@ function registerLiveTools(server2) {
     const killSwitchNote = killSwitchHint(killSwitch);
     if (killSwitchNote)
       liveStateHints.push(killSwitchNote);
+    liveStateHints.push(...pollsLive.hints);
     return textResult({
       eventId,
       agg: aggSnap.val() ?? {},
       analyticsPaused: killSwitchFlag(killSwitch),
       ctrl: ctrlSnap.val() ?? {},
       chat,
+      polls: pollsLive.polls,
+      pollsRead: pollsLive.read,
       hints: liveStateHints
     });
   });
@@ -121783,9 +122495,9 @@ async function assertSessionHasNothingToEnd(eventId, sessionId) {
     read = { ok: false };
     readFailure = error3 instanceof Error ? error3.message : String(error3);
   }
-  const refusal6 = sessionRepairRefusal(sessionRepairAction({ liveSessionBaseline: sessionBaselineFromRead(read) }));
-  if (refusal6)
-    throw new Error(readFailure ? `${refusal6} (read failed: ${readFailure})` : refusal6);
+  const refusal7 = sessionRepairRefusal(sessionRepairAction({ liveSessionBaseline: sessionBaselineFromRead(read) }));
+  if (refusal7)
+    throw new Error(readFailure ? `${refusal7} (read failed: ${readFailure})` : refusal7);
 }
 async function attemptCleanup(path, run) {
   try {
@@ -121923,9 +122635,9 @@ function extendSessionRefusalResult(eventId, error3) {
     return null;
   const info = details && typeof details === "object" ? details : {};
   const text = safeString(message);
-  const refusal6 = (body) => ({ ...textResult({ tool: "oko_extend_session", eventId, ...body }), isError: true });
+  const refusal7 = (body) => ({ ...textResult({ tool: "oko_extend_session", eventId, ...body }), isError: true });
   if (info.reason === "session_not_running") {
-    return refusal6({
+    return refusal7({
       errorCode: "SESSION_NOT_RUNNING",
       message: text || "No analytics session is running on this page, so there is nothing to extend.",
       whatToDo: [
@@ -121934,14 +122646,14 @@ function extendSessionRefusalResult(eventId, error3) {
     });
   }
   if (info.reason === "planned_end_invalid") {
-    return refusal6({
+    return refusal7({
       errorCode: "PLANNED_END_INVALID",
       message: text || "The new end must be a moment in the future.",
       whatToDo: ["Pass endsAt later than now, or addMinutes to move the current end forward."]
     });
   }
   if (info.reason === "outside_show_window") {
-    return refusal6({
+    return refusal7({
       errorCode: "OUTSIDE_SHOW_WINDOW",
       message: text || "The show window of this page is over: a session can no longer be extended.",
       whatToDo: ["End the session with oko_end_session; to run the show on another date, duplicate the page with oko_duplicate_event."]
@@ -122217,7 +122929,7 @@ function registerSessionTools(server2) {
         "timelineLimit: max timeline buckets per session when includeTimeline=true.",
         "includeSnapshots: include baseline/final snapshots; default false."
       ],
-      returns: "sessions plus count, limit, hasMore/has_more, nextCursor/next_cursor, and analyticsPaused \u2014 true/false, or null when the platform's kill switch could not be read. Heavy timeline/snapshot fields are omitted unless requested.",
+      returns: "sessions plus count, limit, hasMore/has_more, nextCursor/next_cursor, and analyticsPaused \u2014 true/false, or null when the platform's kill switch could not be read. Heavy timeline/snapshot fields are omitted unless requested. A session carries polls (the poll rounds voted in it) when viewers voted.",
       examples: ["Use default options for dashboard-like summaries; request includeTimeline only for chart/debug tasks."]
     }),
     inputSchema: {
@@ -122280,7 +122992,10 @@ function registerSessionTools(server2) {
         "includeSnapshots: include baseline/final snapshots; default false."
       ],
       returns: "event/session ids, report URL, markdown summary, event summary, and compact session object. For a session that has not ended yet, also analyticsPaused \u2014 true/false, or null when the platform's kill switch could not be read.",
-      examples: ["Use after a webinar when the user asks for the finished session report without manually opening the report page."]
+      examples: ["Use after a webinar when the user asks for the finished session report without manually opening the report page."],
+      notes: [
+        "Polls: when viewers voted during the session, the markdown has a Polls section and session.polls lists each poll round with its options and counts (votes cast IN THIS SESSION; a round that ran through several sessions is split between their reports; shares are of the voters, so with several answers allowed they can pass 100%). dataQualityWarnings says when the vote count of a session failed (pollsUnmeasured): then an empty polls section means not measured, not nobody voted."
+      ]
     }),
     inputSchema: {
       eventId: eventIdField,
@@ -122333,7 +123048,7 @@ function registerSessionTools(server2) {
 
 // build/tools/telegramBilling.js
 var TELEGRAM_POST_PRICE_LUMENS = 5;
-var TOOL3 = "oko_publish_telegram_post";
+var TOOL4 = "oko_publish_telegram_post";
 function telegramPostCost(scheduled) {
   return {
     lumens: TELEGRAM_POST_PRICE_LUMENS,
@@ -122343,26 +123058,26 @@ function telegramPostCost(scheduled) {
     when: scheduled ? "Scheduling is free. At the scheduled time the platform checks that the payer's plan includes Telegram posts and the wallet holds enough lumens; otherwise the post is refused then (deliveryError plan_required or no_lumens) and nothing is charged." : "The plan and the balance are checked before the send. A refused post is not sent and nothing is charged."
   };
 }
-function refusal5(body) {
-  return { ...textResult({ tool: TOOL3, ...body }), isError: true };
+function refusal6(body) {
+  return { ...textResult({ tool: TOOL4, ...body }), isError: true };
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function telegramPostRefusalResult(eventId, postId, error3, callerUid) {
-  if (!isRecord5(error3))
+  if (!isRecord6(error3))
     return null;
   const { code, message, details } = error3;
   if (typeof code !== "string" || !code.startsWith("functions/"))
     return null;
-  const info = isRecord5(details) ? details : {};
+  const info = isRecord6(details) ? details : {};
   const text = safeString(message);
   const afterwards = "After the cause is fixed, create a new post with oko_publish_telegram_post and delete this failed one with oko_cancel_telegram_post (confirm:true) so the history shows one post.";
   if (info.errorCode === "ENTITLEMENT_REQUIRED") {
     const reason = typeof info.reason === "string" ? info.reason : null;
     const inactive = reason === "expired" || reason === "grace_over" || reason === "period_ended";
     const callerIsPayer = typeof info.payerUid === "string" && info.payerUid === callerUid;
-    return refusal5({
+    return refusal6({
       errorCode: "ENTITLEMENT_REQUIRED",
       eventId,
       postId,
@@ -122381,7 +123096,7 @@ function telegramPostRefusalResult(eventId, postId, error3, callerUid) {
   if (info.errorCode === "INSUFFICIENT_TOKENS") {
     const callerIsPayer = info.actorIsPayer === true || info.callerIsPayer === true;
     const needed = typeof info.needed === "number" ? info.needed : TELEGRAM_POST_PRICE_LUMENS;
-    return refusal5({
+    return refusal6({
       errorCode: "INSUFFICIENT_TOKENS",
       eventId,
       postId,
@@ -122399,7 +123114,7 @@ function telegramPostRefusalResult(eventId, postId, error3, callerUid) {
     });
   }
   if (typeof info.errorCode !== "string" && info.reason === "payer_unresolved") {
-    return refusal5({
+    return refusal6({
       errorCode: "PAYER_UNRESOLVED",
       eventId,
       postId,
@@ -122702,13 +123417,13 @@ function registerTelegramTools(server2) {
 }
 
 // build/tools/wallet.js
-var TOOL4 = "oko_wallet";
+var TOOL5 = "oko_wallet";
 var GRANTS_LIMIT = 50;
 var LEDGER_MAX = 50;
 var LEDGER_DEFAULT = 20;
 var GRANT_BUCKETS = ["plan", "rollover", "topup"];
 var LEDGER_KINDS = ["grant", "charge", "refund", "expire", "settlement"];
-function isRecord6(value) {
+function isRecord7(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isSafeInt(value) {
@@ -122723,10 +123438,10 @@ function isoOrNull(value) {
   return ms === null ? null : new Date(ms).toISOString();
 }
 function readWalletBalance(raw) {
-  return isRecord6(raw) && isSafeInt(raw.balance) ? raw.balance : null;
+  return isRecord7(raw) && isSafeInt(raw.balance) ? raw.balance : null;
 }
 function grantForOutput(id, raw) {
-  if (!isRecord6(raw))
+  if (!isRecord7(raw))
     return null;
   if (!GRANT_BUCKETS.includes(raw.bucket))
     return null;
@@ -122745,13 +123460,13 @@ function grantForOutput(id, raw) {
   };
 }
 function ledgerRowForOutput(id, raw) {
-  if (!isRecord6(raw))
+  if (!isRecord7(raw))
     return null;
   if (!LEDGER_KINDS.includes(raw.kind))
     return null;
   if (!isSafeInt(raw.amount) || !isSafeInt(raw.delta) || !isSafeInt(raw.balanceAfter))
     return null;
-  const ref2 = isRecord6(raw.ref) ? raw.ref : {};
+  const ref2 = isRecord7(raw.ref) ? raw.ref : {};
   const text = (value) => typeof value === "string" && value ? value : null;
   const sessionId = text(ref2.sessionId) ?? text(raw.sessionId);
   const isSessionRow = raw.kind === "charge" && sessionId !== null;
@@ -122772,11 +123487,93 @@ function ledgerRowForOutput(id, raw) {
     forgiven: isSessionRow ? readCount(raw.forgiven ?? ref2.forgiven) : null
   };
 }
+var PLAN_TIERS = ["core", "pro", "max", "legacy"];
+var PLAN_STATUSES = ["active", "past_due", "canceled_at_period_end", "expired"];
+var PLAN_SOURCES = ["lava", "operator", "legacy-exit", "transition-b", "smoke"];
+function momentMs(value) {
+  if (value instanceof Date)
+    return Number.isNaN(value.getTime()) ? null : value.getTime();
+  if (isRecord7(value) && typeof value.toMillis === "function") {
+    const ms = value.toMillis();
+    return typeof ms === "number" && Number.isFinite(ms) ? ms : null;
+  }
+  return null;
+}
+function readOrganizerPlan(accessData) {
+  if (!isRecord7(accessData))
+    return { state: "unreadable" };
+  const raw = accessData.plan;
+  if (raw === void 0 || raw === null)
+    return { state: "none" };
+  if (!isRecord7(raw))
+    return { state: "unreadable" };
+  const tier = PLAN_TIERS.find((candidate) => candidate === raw.tier);
+  const status = PLAN_STATUSES.find((candidate) => candidate === raw.status);
+  if (!tier || !status)
+    return { state: "unreadable" };
+  const dates = { periodStart: null, periodEnd: null, graceUntil: null };
+  for (const key of ["periodStart", "periodEnd", "graceUntil"]) {
+    const value = raw[key];
+    if (value === void 0 || value === null)
+      continue;
+    const ms = momentMs(value);
+    if (ms === null)
+      return { state: "unreadable" };
+    dates[key] = ms;
+  }
+  const seats = raw.seatsIncluded;
+  if (seats !== void 0 && seats !== null && !(Number.isInteger(seats) && seats > 0))
+    return { state: "unreadable" };
+  const iso2 = (ms) => ms === null ? null : new Date(ms).toISOString();
+  return {
+    state: "plan",
+    plan: {
+      tier,
+      status,
+      source: PLAN_SOURCES.find((candidate) => candidate === raw.source) ?? null,
+      periodEnd: iso2(dates.periodEnd),
+      graceUntil: iso2(dates.graceUntil)
+    }
+  };
+}
+function planAnswer(read) {
+  const url = billingUrl();
+  const reading = read.kind === "access" && read.exists ? readOrganizerPlan(read.data) : { state: "unreadable" };
+  const standing = `This tool only reads. A plan or lumens are bought, changed or cancelled only in the OKO web cabinet (${url}): send the organizer there, and never ask for card details or a password.`;
+  if (reading.state === "unreadable") {
+    return {
+      plan: null,
+      planRead: "unreadable",
+      hints: [
+        `The plan could not be read (the platform refused the read, or the stored plan is malformed). Do not guess it: the organizer sees the real plan in the OKO web cabinet (${url}).`,
+        standing
+      ]
+    };
+  }
+  if (reading.state === "none") {
+    return {
+      plan: null,
+      planRead: "ok",
+      hints: [`This organizer has no plan: the paid features and spending lumens stay unavailable until a plan is bought in the OKO web cabinet (${url}). This tool cannot buy one.`, standing]
+    };
+  }
+  const { plan } = reading;
+  const hints = [];
+  if (plan.status === "past_due") {
+    hints.push(`The last renewal payment failed. The plan keeps working until graceUntil${plan.graceUntil ? ` (${plan.graceUntil})` : ""}; the organizer renews it in the OKO web cabinet (${url}) before then.`);
+  } else if (plan.status === "canceled_at_period_end") {
+    hints.push(`The subscription is cancelled: the plan works until periodEnd${plan.periodEnd ? ` (${plan.periodEnd})` : ""} and does not renew. Any change to it is made only in the OKO web cabinet (${url}).`);
+  } else if (plan.status === "expired") {
+    hints.push(`The plan has ended. A new plan is bought only in the OKO web cabinet (${url}).`);
+  }
+  hints.push(standing);
+  return { plan, planRead: "ok", hints };
+}
 function walletReadRefusal() {
   return {
     ...textResult({
       errorCode: "PLATFORM_REJECTED_READ",
-      tool: TOOL4,
+      tool: TOOL5,
       message: "OKO's security rules refused to read this organizer's wallet although the key carries wallet:read. The organizer behind the key may be blocked or inactive, or the platform has not opened wallets to MCP keys yet.",
       whatToDo: [
         "Do not retry: rules do not change between attempts.",
@@ -122788,7 +123585,7 @@ function walletReadRefusal() {
   };
 }
 function walletAnswer(input) {
-  const { uid, walletExists, walletData, grantDocs, ledgerDocs, max } = input;
+  const { uid, walletExists, walletData, grantDocs, ledgerDocs, max, planRead } = input;
   let balance = null;
   if (walletExists) {
     balance = readWalletBalance(walletData);
@@ -122816,8 +123613,9 @@ function walletAnswer(input) {
       unreadableLedgerRows += 1;
   }
   const last = page.at(-1);
-  const lastAt = isRecord6(last?.data) ? last.data.at : void 0;
+  const lastAt = isRecord7(last?.data) ? last.data.at : void 0;
   const nextCursor = hasMore ? timestampCursorFrom(lastAt, last?.id) : null;
+  const planBlock = planRead ? planAnswer(planRead) : null;
   const hints = [];
   if (grantDocs !== null && !walletExists)
     hints.push("This organizer has no wallet yet: nothing was ever granted. Plans and lumens are bought only in the OKO web cabinet.");
@@ -122825,8 +123623,12 @@ function walletAnswer(input) {
     hints.push("Some rows did not read (unreadableGrants / unreadableLedgerRows): tell the organizer, the balance is still the wallet's own figure.");
   if (hasMore && nextCursor === null)
     hints.push("There are more ledger rows but the page boundary could not be named: the listing stops here.");
+  if (planBlock)
+    hints.push(...planBlock.hints);
   return {
     uid,
+    billingUrl: billingUrl(),
+    ...planBlock ? { plan: planBlock.plan, planRead: planBlock.planRead } : {},
     hasWallet: walletExists,
     balance,
     unit: "lumens",
@@ -122838,24 +123640,96 @@ function walletAnswer(input) {
     hints
   };
 }
+async function readPlanDocument(uid) {
+  try {
+    const snap = await getDoc(doc(firestore, "organizerAccess", uid));
+    return { kind: "access", exists: snap.exists(), data: snap.data() };
+  } catch (error3) {
+    if (isFirestorePermissionDenied(error3))
+      return { kind: "refused" };
+    throw error3;
+  }
+}
+var WORKSPACE_TOOL = "oko_workspace_wallet";
+function workspaceWalletRefusal(workspaceId, body) {
+  return { ...textResult({ tool: WORKSPACE_TOOL, workspaceId, ...body }), isError: true };
+}
+function workspaceWalletRefusalResult(workspaceId, error3) {
+  if (!error3 || typeof error3 !== "object")
+    return null;
+  const { code, details } = error3;
+  if (typeof code !== "string" || !code.startsWith("functions/"))
+    return null;
+  const reason = isRecord7(details) ? details.reason : null;
+  if (reason === "wallet_view_forbidden") {
+    return workspaceWalletRefusal(workspaceId, {
+      errorCode: "WALLET_VIEW_FORBIDDEN",
+      message: "OKO does not show this wallet to this organizer. The balance of the wallet that pays for a workspace is told only to the payer and to the members who may spend from it (create events, edit setup, control the live show, start sessions, send notifications).",
+      whatToDo: [
+        "Check the workspace id with oko_list_workspaces: it must be a workspace this organizer belongs to.",
+        "If it is, ask the workspace owner for the right to spend from the workspace, or ask them for the balance. Do not guess a figure.",
+        "Do not retry as is: rights do not change between attempts."
+      ]
+    });
+  }
+  if (reason === "wallet_unreadable") {
+    return workspaceWalletRefusal(workspaceId, {
+      errorCode: "WALLET_UNREADABLE",
+      message: "The balance could not be read just now. It is not zero: it is unknown.",
+      whatToDo: [
+        "Repeat the call in a moment. If it keeps failing, tell the organizer the balance is visible in the OKO cabinet under Billing.",
+        "Do not report a balance and do not say the wallet is empty."
+      ]
+    });
+  }
+  return null;
+}
+function workspaceWalletAnswer(workspaceId, answer) {
+  const data = isRecord7(answer) ? answer : {};
+  const hasWallet = data.hasWallet;
+  const available = data.available;
+  if (typeof hasWallet !== "boolean") {
+    throw new Error("The server's answer about the workspace wallet is malformed (hasWallet is not a yes/no). This is a platform data fault: report it, do not present a balance.");
+  }
+  if (hasWallet && !isSafeInt(available)) {
+    throw new Error("The workspace wallet exists but its balance is not a whole number. This is a platform data fault: report it, do not present the balance as zero.");
+  }
+  const payerIsCaller = data.payerIsCaller === true;
+  const hints = [];
+  if (!hasWallet)
+    hints.push("The payer of this workspace has no wallet yet (nothing was ever granted): available is null, which is not zero. Plans and lumens are bought only in the OKO web cabinet.");
+  if (!payerIsCaller)
+    hints.push("This is the wallet of the workspace OWNER, who pays for the pages of this workspace. Only the number is told; the owner's plan, grants and ledger are theirs. Only the owner tops it up, in the OKO web cabinet.");
+  hints.push(`This tool only reads. Plans and lumens are bought, changed and cancelled only in the OKO web cabinet (${billingUrl()}): send the organizer there, and never ask for card details or a password.`);
+  return {
+    workspaceId: safeString(data.workspaceId, workspaceId),
+    hasWallet,
+    available: hasWallet ? available : null,
+    unit: "lumens",
+    payerIsCaller,
+    billingUrl: billingUrl(),
+    hints
+  };
+}
 function registerWalletTools(server2) {
   server2.registerTool("oko_wallet", {
     title: "Read lumen wallet",
     description: toolDescription({
-      summary: "Read the lumen balance, the grants (buckets) and the ledger of the organizer's OWN wallet, the one behind this key. Read-only.",
+      summary: "Read the plan, the lumen balance, the grants (buckets) and the ledger of the organizer's OWN account, the one behind this key, with the link to the OKO cabinet's Billing page. Read-only: it cannot buy anything.",
       args: [
         "limit: ledger rows per page, default 20, max 50, newest first.",
-        "cursor: nextCursor returned by the previous page. The grants come with the first page only; the balance with every page."
+        "cursor: nextCursor returned by the previous page. The plan and the grants come with the first page only; the balance with every page."
       ],
-      returns: 'hasWallet, balance (whole lumens, null when the organizer has no wallet yet), unit "lumens", grants on the first page (id, bucket plan|rollover|topup, amount, remaining, expiresAt, createdAt), ledger rows (id, kind grant|charge|refund|expire|settlement, amount, delta, balanceAfter, by, at, eventId, showId, workspaceId, postId, sessionId, minutes, forgiven), unreadableGrants/unreadableLedgerRows (rows that did not read: say so, never hide them) and cursor pagination metadata.',
+      returns: `billingUrl (the cabinet's Billing page), plan on the first page (tier core|pro|max|legacy, status active|past_due|canceled_at_period_end|expired, source lava|operator|legacy-exit|transition-b|smoke or null, periodEnd and graceUntil as ISO times or null; plan is null when the organizer has no plan) with planRead ok|unreadable (unreadable: the plan could not be read, so null means unknown, not no plan), hasWallet, balance (whole lumens, null when the organizer has no wallet yet), unit "lumens", grants on the first page (id, bucket plan|rollover|topup, amount, remaining, expiresAt, createdAt), ledger rows (id, kind grant|charge|refund|expire|settlement, amount, delta, balanceAfter, by, at, eventId, showId, workspaceId, postId, sessionId, minutes, forgiven), unreadableGrants/unreadableLedgerRows (rows that did not read: say so, never hide them) and cursor pagination metadata.`,
       examples: [
         "Use before publishing a page or starting a session when the organizer asks how many lumens are left or what was charged.",
         "Use to explain a charge or a refund: every ledger row names what paid (eventId, sessionId, postId) and the balance after it."
       ],
       notes: [
         "Needs the wallet:read scope. A key created before that scope existed gets SCOPE_REQUIRED and its scopes cannot be changed: the organizer creates a new key in the OKO cabinet.",
-        "Shows only the wallet of the organizer behind the key. A page in a shared workspace is paid from the WORKSPACE OWNER's wallet: the publish, session and Telegram previews and refusals name that payer and tell its balance to whoever may spend from it (publish, start a session, send posts); the owner's grants and ledger are theirs to read, not this key's.",
-        "This tool cannot buy, grant, top up or spend lumens. Plans, lumens and payment details belong to the OKO web cabinet only; never ask the organizer for card data or a password.",
+        "Shows only the wallet of the organizer behind the key. A page in a shared workspace is paid from the WORKSPACE OWNER's wallet: the publish, session and Telegram previews and refusals name that payer and tell its balance to whoever may spend from it (publish, start a session, send posts); the owner's grants and ledger are theirs to read, not this key's. The balance of the wallet that pays for a workspace is one call away: oko_workspace_wallet.",
+        "This tool cannot buy, change, cancel, grant, top up or spend anything. A plan and lumens are bought, changed and cancelled in the OKO web cabinet only (billingUrl): send the organizer there, and never ask for card data or a password.",
+        "The plan shown is the organizer's own, the one behind this key. A paid action on a page of a shared workspace is judged by the PAYER's plan (the workspace owner's), which this key cannot read: the refusal of the paid tool names what is missing.",
         "Refusals of the paid tools use the same codes as the web: ENTITLEMENT_REQUIRED (the plan does not include the feature) and INSUFFICIENT_TOKENS (not enough lumens); PLATFORM_REJECTED_READ here means the platform refused the read."
       ]
     }),
@@ -122872,10 +123746,11 @@ function registerWalletTools(server2) {
       const constraints = [orderBy("at", "desc"), limit(max + 1)];
       if (cursor)
         constraints.splice(1, 0, startAfter(...parseTimestampCursor(cursor)));
-      const [walletSnap, grantsSnap, ledgerSnap] = await Promise.all([
+      const [walletSnap, grantsSnap, ledgerSnap, planRead] = await Promise.all([
         getDoc(doc(firestore, "wallets", uid)),
         first ? getDocs(query2(collection(firestore, "wallets", uid, "grants"), orderBy("createdAt", "desc"), limit(GRANTS_LIMIT))) : Promise.resolve(null),
-        getDocs(query2(collection(firestore, "wallets", uid, "ledger"), ...constraints))
+        getDocs(query2(collection(firestore, "wallets", uid, "ledger"), ...constraints)),
+        first ? readPlanDocument(uid) : Promise.resolve(null)
       ]);
       return textResult(walletAnswer({
         uid,
@@ -122883,7 +123758,8 @@ function registerWalletTools(server2) {
         walletData: walletSnap.data(),
         grantDocs: grantsSnap ? grantsSnap.docs.map((item) => ({ id: item.id, data: item.data() })) : null,
         ledgerDocs: ledgerSnap.docs.map((item) => ({ id: item.id, data: item.data() })),
-        max
+        max,
+        planRead
       }));
     } catch (error3) {
       if (isFirestorePermissionDenied(error3))
@@ -122891,6 +123767,43 @@ function registerWalletTools(server2) {
       throw error3;
     }
   });
+  server2.registerTool("oko_workspace_wallet", {
+    title: "Read a workspace's lumen balance",
+    description: toolDescription({
+      summary: "Read how many lumens the wallet that pays for a workspace holds \u2014 one number. For a shared workspace that is the WORKSPACE OWNER's wallet; for the organizer's personal workspace (its id is the organizer's own uid) it is their own. Read-only: it cannot buy anything.",
+      exampleCall: { workspaceId: "yH4dN8sQ2wE6rT1uI9oP" },
+      args: ["workspaceId: the workspace whose payer's balance to read (oko_list_workspaces)."],
+      returns: `workspaceId, hasWallet, available (whole lumens; null when the payer has no wallet yet \u2014 not zero), unit "lumens", payerIsCaller (true: it is the organizer's own wallet), billingUrl and hints.`,
+      examples: [
+        "Use before publishing a page or starting a session in a shared workspace, to tell whether the wallet that pays can cover it.",
+        "oko_wallet shows the organizer's OWN plan, grants and ledger; this tool shows the balance that pays for a workspace."
+      ],
+      notes: [
+        "Needs the wallet:read scope (presets operator and full). Allowed for the payer and for members who may spend from the payer's wallet (create events, edit setup, control the live show, start sessions, send notifications); anyone else, and a workspace that does not exist, get the same refusal WALLET_VIEW_FORBIDDEN.",
+        "Only the number is told to a member. The owner's plan, grants and ledger stay the owner's: use oko_wallet for your own.",
+        "An unreadable balance is the refusal WALLET_UNREADABLE, never zero.",
+        "This tool cannot buy, change, cancel, grant, top up or spend anything. Plans and lumens are bought only in the OKO web cabinet (billingUrl): send the organizer there, and never ask for card data or a password."
+      ]
+    }),
+    inputSchema: {
+      workspaceId: external_exports.string().min(1).max(128).regex(/^[^/]+$/, "A workspace id has no slash.").describe("Workspace id, as oko_list_workspaces lists it (a personal workspace's id is the organizer's uid).")
+    },
+    outputSchema: workspaceWalletOutputSchema,
+    annotations: readOnlyTool
+  }, async ({ workspaceId }) => {
+    await authed(["wallet:read"]);
+    const read = httpsCallable(functions, "readWorkspaceWallet");
+    let answer;
+    try {
+      answer = (await read({ workspaceId })).data;
+    } catch (error3) {
+      const named = workspaceWalletRefusalResult(workspaceId, error3);
+      if (named)
+        throw new ToolRefusal(named);
+      throw error3;
+    }
+    return textResult(workspaceWalletAnswer(workspaceId, answer));
+  });
 }
 
 // build/tools/workspaceRefusal.js
@@ -122997,9 +123910,9 @@ function registerWorkspaceTools(server2) {
       const created = await createWorkspace({ name: name7.trim() });
       return textResult({ workspaceId: created.data.workspaceId, name: created.data.name ?? name7.trim(), created: true });
     } catch (error3) {
-      const refusal6 = workspaceRefusalResult("oko_create_workspace", error3);
-      if (refusal6)
-        throw new ToolRefusal(refusal6);
+      const refusal7 = workspaceRefusalResult("oko_create_workspace", error3);
+      if (refusal7)
+        throw new ToolRefusal(refusal7);
       throw error3;
     }
   });
@@ -123134,12 +124047,12 @@ function registerWorkspaceTools(server2) {
           ...args.comment !== void 0 ? { comment: args.comment.trim() } : {}
         });
       } catch (error3) {
-        const refusal6 = workspaceRefusalResult("oko_update_workspace_member", error3, {
+        const refusal7 = workspaceRefusalResult("oko_update_workspace_member", error3, {
           workspaceId: args.workspaceId,
           uid: args.uid
         });
-        if (refusal6)
-          throw new ToolRefusal(refusal6);
+        if (refusal7)
+          throw new ToolRefusal(refusal7);
         throw error3;
       }
       const createdFields = ["permissions"];
@@ -123263,9 +124176,9 @@ function registerWorkspaceTools(server2) {
       const result = await claimInvite({ code: code.trim().toUpperCase() });
       return textResult({ ...serialize(result.data) });
     } catch (error3) {
-      const refusal6 = workspaceRefusalResult("oko_claim_workspace_invite", error3);
-      if (refusal6)
-        throw new ToolRefusal(refusal6);
+      const refusal7 = workspaceRefusalResult("oko_claim_workspace_invite", error3);
+      if (refusal7)
+        throw new ToolRefusal(refusal7);
       throw error3;
     }
   });
@@ -123347,6 +124260,7 @@ function registerTools(server2) {
   registerPublicationTools(server2);
   registerUnpublicationTools(server2);
   registerLiveTools(server2);
+  registerPollTools(server2);
   registerSessionTools(server2);
   registerChatTools(server2);
   registerLeadTools(server2);