@okostream/mcp 0.5.3 → 0.5.4

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.5.4 - 2026-07-10
+
+- Separated NMO from the standard webinar workflow throughout instructions, resources, prompts, README, and the companion skill.
+- Marked NMO as an unfinished special MVP mode that must only be enabled after an explicit organizer request and limitation disclosure.
+- Documented the current NMO gaps: hardened email-link/strict single-device, checkpoint auto-close, official portal integration, and remaining Sprint 2 UX/automation.
+- Added protocol assertions preventing future onboarding from silently presenting NMO as a normal production-ready webinar option.
+
 ## 0.5.3 - 2026-07-10
 
 - Added an explicit product model: OKO wraps an organizer-supplied video player and does not host or start the underlying stream.

package/README.md

@@ -56,6 +56,8 @@ Node.js 20.18.1 or newer is required.
 
 OKO is a webinar experience and operations layer, not a video-streaming host. The organizer supplies a YouTube, iframe, or other player URL; OKO adds the event page, configurable audience blocks, chat, analytics, and NMO attendance controls around it. Start/End tools control analytics sessions only, never the underlying video stream.
 
+Standard webinars are the default supported workflow. NMO is a separate unfinished MVP mode and must be enabled only on an explicit organizer request after reviewing `oko://guide/nmo`; it is not a normal option inferred from a medical topic or audience.
+
 ## Security Model
 
 - Each API key exchanges into its own Firebase identity `mcp_<keyId>`; it never inherits platform-owner claims from the organizer account.

package/dist/guides.js

@@ -3,6 +3,7 @@ export const OKO_MCP_INSTRUCTIONS = [
     "You are controlling OKO Stream as an organizer through MCP tools.",
     "OKO is a webinar experience and operations layer, not a video-streaming host. The organizer supplies a YouTube, iframe, or other player URL; OKO adds the event page, audience blocks, chat, analytics, and NMO attendance controls around it.",
     "Use the source player or encoder to start video. In OKO, Start and End manage analytics sessions only, while blocks and chat control the attendee experience around the supplied video.",
+    "Default to a standard webinar. NMO is a separate unfinished MVP mode, not a normal webinar option: never infer or enable it from the audience or topic. Use it only after the organizer explicitly requests NMO and accepts the current limitations in oko://guide/nmo.",
     "Start every new workspace session with oko_whoami, then respect the returned scopes.",
     "OKO events have no draft/live/ended status. Start/End controls manage analytics sessions only, never video streaming.",
     "For webinar creation, prefer this flow: oko_create_webinar, oko_configure_blocks, oko_configure_cards, image uploads, oko_validate_event_setup, then return public/setup/analytics links.",
@@ -26,13 +27,14 @@ const GUIDE_RESOURCES = [
             "1. Call `oko_whoami` and inspect scopes.",
             "2. If the workspace is unclear, call `oko_list_workspaces`.",
             "3. Call `oko_create_webinar` with title/date/workspace and video URL when known.",
-            "4. Call `oko_configure_blocks` for video, forms, CTA, banner, Telegram, and NMO settings.",
+            "4. Call `oko_configure_blocks` for video, forms, CTA, banner, and Telegram settings.",
             "5. Call `oko_configure_cards` with stable card ids before uploading card images.",
             "6. Upload images with `oko_upload_card_images_batch` or `oko_upload_image`, then wait for variants.",
             "7. Call `oko_validate_event_setup` and fix blocking findings.",
             "8. Return public, setup, analytics, registration, and login links that apply to the event.",
             "",
             "Important: OKO has no event status. Do not invent draft/live/ended lifecycle states.",
+            "NMO is not part of this standard workflow. If the organizer explicitly requests the separate NMO MVP mode, read `oko://guide/nmo`, disclose its current limitations, and follow that workflow separately.",
         ].join("\n"),
     },
     {
@@ -58,14 +60,22 @@ const GUIDE_RESOURCES = [
     {
         name: "oko_mcp_nmo",
         uri: "oko://guide/nmo",
-        title: "Run an NMO / CME Webinar",
-        description: "Complete organizer workflow for NMO participants, checkpoints, and technical attendance results.",
+        title: "NMO Mode (Special MVP Workflow)",
+        description: "Separate unfinished NMO mode: current MVP workflow, limits, participants, checkpoints, and technical results.",
         text: [
-            "# Run an NMO / CME Webinar",
+            "# NMO Mode (Special MVP Workflow)",
             "",
-            "NMO mode is for attendance-controlled medical education webinars. OKO records technical eligibility from watch-time and checkpoint ratios; the organizer remains responsible for the formal accreditation process and participant communications.",
+            "NMO is a separate, unfinished MVP mode for attendance-controlled medical education webinars. It is not part of a standard OKO webinar and must never be enabled because the audience happens to be doctors or the topic is medical. Proceed only when the organizer explicitly requests NMO and understands the limitations below.",
             "",
-            "## Prepare",
+            "## Current limits",
+            "- The hardened email-link login and strict instant single-device enforcement are not finished.",
+            "- Checkpoint timeout does not auto-close the checkpoint; the organizer must close it manually.",
+            "- OKO is not integrated with the official NMO portal and does not issue an official credit or certificate.",
+            "- Sprint 2 operator UX and automation remain incomplete. Treat this as a controlled pilot workflow, not a default production promise.",
+            "",
+            "Within those limits, OKO can record technical eligibility from watch-time and checkpoint ratios. The organizer remains responsible for participant communication, identity assurance, accreditation, and the decision to use the mode.",
+            "",
+            "## Available MVP workflow",
             "1. Create the event with its video source, then call `oko_configure_blocks` with `nmo.enabled:true`, watch-time and checkpoint criteria, and optional position/organization fields.",
             "2. Add approved participants with `oko_add_nmo_participant` or bulk-import them with `oko_import_nmo_participants`. Inspect per-row import failures before continuing.",
             "3. Return the event's registration and login links to participants. NMO access is gated by the imported participant list.",
@@ -79,7 +89,7 @@ const GUIDE_RESOURCES = [
             "## After the webinar",
             "1. End the analytics session only after explicit organizer confirmation.",
             "2. Use `oko_get_session_report` or `oko_get_analytics` with NMO rows when detailed technical attendance results are needed.",
-            "3. Report watch-time and checkpoint results as technical OKO evidence. Do not promise an official credit or certificate unless the organizer's accreditation process confirms it.",
+            "3. Report watch-time and checkpoint results only as technical OKO evidence. Do not present the NMO mode as complete or promise an official credit, certificate, strict identity proof, or production readiness.",
         ].join("\n"),
     },
     {
@@ -181,7 +191,7 @@ const GUIDE_RESOURCES = [
             "",
             "## Webinar setup",
             "- Create, duplicate, move, update, validate, and delete webinars.",
-            "- Configure forms, CTA, banner, cards, video placeholder, Telegram, and NMO settings.",
+            "- Configure forms, CTA, banner, cards, video placeholder, and Telegram settings for standard webinars.",
             "- Upload images from local paths, data URLs, or HTTPS URLs and wait for variants.",
             "",
             "## Live analytics",
@@ -192,7 +202,10 @@ const GUIDE_RESOURCES = [
             "## Collaboration and comms",
             "- Manage workspaces, members, invites, notifications, and Telegram post lifecycle.",
             "- Send organizer chat messages and moderate chat users when scoped.",
-            "- Import/remove NMO participants through scoped Cloud Functions.",
+            "",
+            "## NMO special mode (unfinished MVP)",
+            "- Only after an explicit organizer request, configure NMO criteria, import/remove participants, run manual checkpoints, and read technical attendance evidence.",
+            "- Read `oko://guide/nmo` and disclose its current limitations before enabling or operating the mode.",
             "",
             "## Outside the MCP boundary",
             "- OKO MCP does not host, encode, start, or stop the underlying video stream; configure that in the source player or encoder.",
@@ -237,10 +250,11 @@ export function registerGuides(server) {
         "Required flow:",
         "1. Call oko_whoami and verify scopes.",
         "2. Create the webinar in the requested workspace if provided.",
-        "3. Configure metadata, blocks, forms, Telegram, NMO, and cards as needed.",
-        "4. Upload images only after target slots/cards exist; wait for image variants.",
-        "5. Run oko_validate_event_setup and fix actionable errors.",
-        "6. Return public, setup, analytics, registration/login links as applicable.",
+        "3. Configure metadata, standard blocks, forms, Telegram, and cards as needed.",
+        "4. Do not enable NMO unless the brief explicitly requests the separate NMO MVP mode. If it does, read oko://guide/nmo and disclose the current limitations before any NMO write.",
+        "5. Upload images only after target slots/cards exist; wait for image variants.",
+        "6. Run oko_validate_event_setup and fix actionable errors.",
+        "7. Return public, setup, and analytics links; include NMO registration/login links only for an explicitly requested NMO event.",
         "",
         workspaceId ? `Workspace id: ${workspaceId}` : "Workspace id: not specified; choose the personal workspace unless the user clarifies.",
         "",
@@ -261,8 +275,9 @@ export function registerGuides(server) {
         "1. Call oko_whoami and verify scopes.",
         "2. Call oko_get_event and oko_validate_event_setup.",
         "3. If relevant, inspect live state, Telegram posts, participants, leads, and image variant readiness.",
-        "4. Separate errors that block launch from warnings and polish suggestions.",
-        "5. Propose exact MCP tool calls needed to fix issues; execute only if the organizer asked for implementation.",
+        "4. If nmoMode is enabled, read oko://guide/nmo and report the unfinished-mode limitations separately from setup findings.",
+        "5. Separate errors that block launch from warnings and polish suggestions.",
+        "6. Propose exact MCP tool calls needed to fix issues; execute only if the organizer asked for implementation.",
         "",
         focus ? `Focus: ${focus}` : "Focus: full setup readiness.",
     ].join("\n")));

package/dist/server.js

@@ -23,7 +23,7 @@ if (process.argv.includes("--help")) {
 }
 const server = new McpServer({
     name: "oko-mcp-server",
-    version: "0.5.3",
+    version: "0.5.4",
 }, {
     instructions: OKO_MCP_INSTRUCTIONS,
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "MCP server for managing OKO Stream webinars as an organizer.",
   "license": "UNLICENSED",
   "type": "module",