@okostream/mcp 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.5.2 - 2026-07-10
+
+- Fixed webinar create/duplicate output schemas so successful writes cannot be reported as protocol failures.
+- Made Firestore event creation compensate automatically when the required RTDB mirror fails.
+- Removed a stale RTDB mirror rewrite from metadata updates.
+- Routed event deletion through an authorized server callable that cleans Firestore subcollections, both RTDB instances, Storage, participants, active sessions, and scheduled Telegram posts.
+- Added a repeatable production smoke workflow against an exact published npm version.
+
 ## 0.5.1 - 2026-07-10
 
 - Replaced hand-maintained remote-image IP ranges with a tested public-unicast policy covering IPv4, IPv6, mapped, reserved, documentation, benchmark, multicast, and private address classes.

package/dist/server.js

@@ -23,7 +23,7 @@ if (process.argv.includes("--help")) {
 }
 const server = new McpServer({
     name: "oko-mcp-server",
-    version: "0.5.1",
+    version: "0.5.2",
 }, {
     instructions: OKO_MCP_INSTRUCTIONS,
 });

package/dist/tools.js

@@ -77,11 +77,21 @@ const updateOutputSchema = z.object({
     eventId: z.string().optional(),
     updated: z.array(z.string()).optional(),
 }).passthrough();
-const createWebinarOutputSchema = {
-    id: z.string(),
+const eventLinksOutputShape = {
     url: z.string().url(),
-    workspaceId: z.string(),
+    setupUrl: z.string().url(),
+    analyticsUrl: z.string().url(),
+    registrationUrl: z.string().url(),
+    loginUrl: z.string().url(),
+    nmoRegistrationUrl: z.string().url().optional(),
+    nmoLoginUrl: z.string().url().optional(),
 };
+const createWebinarOutputSchema = z.object({
+    id: z.string(),
+    workspaceId: z.string(),
+    sourceEventId: z.string().optional(),
+    ...eventLinksOutputShape,
+}).passthrough();
 const cursorMetaSchema = {
     count: z.number().int().nonnegative(),
     limit: z.number().int().positive(),
@@ -100,7 +110,7 @@ const eventsOutputSchema = z.object({
 }).passthrough();
 const eventOutputSchema = z.object({
     id: z.string(),
-    url: z.string().url(),
+    ...eventLinksOutputShape,
 }).passthrough();
 const liveStateOutputSchema = z.object({
     eventId: z.string(),
@@ -1099,6 +1109,22 @@ function initialEventAccess(uid) {
         notificationSenders: [uid],
     };
 }
+async function addEventWithRtdbMirror(uid, workspaceId, eventData) {
+    const eventRef = await addDoc(collection(firestore, "events"), eventData);
+    try {
+        await update(ref(rtdb, `events/${eventRef.id}`), { ownerId: uid, workspaceId });
+    }
+    catch (error) {
+        try {
+            await deleteDoc(eventRef);
+        }
+        catch (rollbackError) {
+            throw new AggregateError([error, rollbackError], `RTDB mirror failed for event ${eventRef.id}, and Firestore rollback also failed.`);
+        }
+        throw error;
+    }
+    return eventRef;
+}
 async function assertCanCreateInWorkspace(uid, workspaceId) {
     if (workspaceId === uid)
         return;
@@ -2040,7 +2066,7 @@ export function registerTools(server) {
         const workspaceId = args.workspaceId ?? uid;
         await assertCanCreateInWorkspace(uid, workspaceId);
         const video = normalizeVideo(args.videoUrl);
-        const docRef = await addDoc(collection(firestore, "events"), {
+        const docRef = await addEventWithRtdbMirror(uid, workspaceId, {
             ownerId: uid,
             workspaceId,
             ...initialEventAccess(uid),
@@ -2058,10 +2084,6 @@ export function registerTools(server) {
                 promoBanner: { enabled: false, text: "", link: "", visibility: "always" },
             },
         });
-        await update(ref(rtdb, `events/${docRef.id}`), {
-            ownerId: uid,
-            workspaceId,
-        });
         return textResult({ id: docRef.id, ...eventLinks(docRef.id), workspaceId });
     });
     server.registerTool("oko_update_event", {
@@ -2096,7 +2118,7 @@ export function registerTools(server) {
         if (requiredScopes.size === 0)
             throw new Error("Provide at least one field to update.");
         const { uid } = await authed([...requiredScopes]);
-        const data = await readEvent(args.eventId, uid, "edit");
+        await readEvent(args.eventId, uid, "edit");
         const patch = {};
         if (args.title !== undefined)
             patch.title = args.title.trim();
@@ -2114,10 +2136,6 @@ export function registerTools(server) {
         if (args.pinned !== undefined)
             patch.pinned = args.pinned;
         await updateDoc(doc(firestore, "events", args.eventId), patch);
-        await update(ref(rtdb, `events/${args.eventId}`), {
-            ownerId: safeString(data.ownerId, uid),
-            workspaceId: safeString(data.workspaceId, uid),
-        });
         return textResult({ id: args.eventId, updated: Object.keys(patch) });
     });
     server.registerTool("oko_configure_blocks", {
@@ -2499,11 +2517,11 @@ export function registerTools(server) {
     server.registerTool("oko_delete_event", {
         title: "Delete event",
         description: toolDescription({
-            summary: "Delete an OKO event document.",
+            summary: "Delete an OKO event and its associated Firestore, RTDB, chat, Storage, participant, and scheduled-post data.",
             args: ["eventId: event to delete.", "confirm: must be true."],
-            returns: "deleted event id.",
+            returns: "deleted event id and cross-store cleanup counts.",
             examples: ["Use only after the user explicitly confirms the exact event title/id."],
-            notes: ["Destructive. Does not control stream state; it deletes the event record."],
+            notes: ["Destructive. The server validates the current per-event delete capability and performs idempotent cross-store cleanup."],
         }),
         inputSchema: { eventId: eventIdField, confirm: z.boolean().optional().describe("Required true for deletion.") },
         outputSchema: z.object({ deleted: z.string() }).passthrough(),
@@ -2512,8 +2530,9 @@ export function registerTools(server) {
         const { uid } = await authed(["events:delete"]);
         const data = await readEvent(eventId, uid, "delete");
         requireConfirm(confirm, "oko_delete_event", { eventId, title: data.title });
-        await deleteDoc(doc(firestore, "events", eventId));
-        return textResult({ deleted: eventId });
+        const deleteEvent = httpsCallable(functions, "deleteEventCompletely");
+        const result = await deleteEvent({ eventId });
+        return textResult(result.data);
     });
     server.registerTool("oko_duplicate_event", {
         title: "Duplicate event",
@@ -2535,7 +2554,7 @@ export function registerTools(server) {
         const source = await readEvent(eventId, uid, "read");
         const workspaceId = targetWorkspaceId ?? safeString(source.workspaceId, uid);
         await assertCanCreateInWorkspace(uid, workspaceId);
-        const newRef = await addDoc(collection(firestore, "events"), {
+        const newRef = await addEventWithRtdbMirror(uid, workspaceId, {
             ownerId: uid,
             workspaceId,
             ...initialEventAccess(uid),
@@ -2551,7 +2570,6 @@ export function registerTools(server) {
             ...(source.nmoCriteria && typeof source.nmoCriteria === "object" ? { nmoCriteria: source.nmoCriteria } : {}),
             ...(source.nmoExtraFields && typeof source.nmoExtraFields === "object" ? { nmoExtraFields: source.nmoExtraFields } : {}),
         });
-        await update(ref(rtdb, `events/${newRef.id}`), { ownerId: uid, workspaceId });
         return textResult({ id: newRef.id, sourceEventId: eventId, workspaceId, ...eventLinks(newRef.id) });
     });
     server.registerTool("oko_move_event", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "MCP server for managing OKO Stream webinars as an organizer.",
   "license": "UNLICENSED",
   "type": "module",
@@ -26,6 +26,7 @@
     "test": "npm run build && node --test test/*.test.mjs",
     "eval:contract": "npm run build && node eval/contract-eval.mjs",
     "eval:model": "npm run build && node eval/model-eval.mjs",
+    "smoke:prod": "node eval/prod-smoke.mjs",
     "prepublishOnly": "npm run build",
     "start": "node dist/server.js"
   },