@okostream/mcp 0.9.2 → 0.10.0

package/dist/tools.js

@@ -868,13 +868,6 @@ function eventLinks(eventId) {
         analyticsUrl: analyticsUrl(eventId),
     };
 }
-function assertEventReadable(data, uid) {
-    const access = Array.isArray(data.accessibleBy) ? data.accessibleBy : [];
-    const editors = Array.isArray(data.editors) ? data.editors : [];
-    if (data.ownerId !== uid && !access.includes(uid) && !editors.includes(uid)) {
-        throw new Error("Event is not accessible to this organizer.");
-    }
-}
 const EVENT_ACCESS_FIELD_BY_MODE = {
     read: "accessibleBy",
     edit: "editors",
@@ -886,22 +879,44 @@ const EVENT_ACCESS_FIELD_BY_MODE = {
     moderate: "chatModerators",
     notify: "notificationSenders",
 };
-function assertEventAccess(data, uid, mode) {
+function grantAllowsMode(data, mode) {
     const field = EVENT_ACCESS_FIELD_BY_MODE[mode];
-    const principals = Array.isArray(data[field]) ? data[field] : [];
-    if (data.ownerId !== uid && !principals.includes(uid)) {
-        throw new Error(`Event does not grant ${mode} access to this organizer.`);
-    }
+    return asRecord(data.capabilities)[field] === true;
+}
+function legacyEventAllowsMode(data, uid, mode) {
+    if (data.ownerId === uid)
+        return true;
+    const fields = mode === "read"
+        ? ["accessibleBy", "editors"]
+        : [EVENT_ACCESS_FIELD_BY_MODE[mode]];
+    return fields.some((field) => (Array.isArray(data[field]) && data[field].includes(uid)));
+}
+function isFirestorePermissionDenied(error) {
+    if (!error || typeof error !== "object")
+        return false;
+    const code = error.code;
+    return code === "permission-denied"
+        || code === "firestore/permission-denied"
+        || code === "PERMISSION_DENIED";
 }
 async function readEvent(eventId, uid, mode = "read") {
-    const snap = await getDoc(doc(firestore, "events", eventId));
+    const [snap, grant] = await Promise.all([
+        getDoc(doc(firestore, "events", eventId)),
+        getDoc(doc(firestore, "eventAccess", uid, "grants", eventId)).catch((error) => {
+            if (!isFirestorePermissionDenied(error))
+                throw error;
+            return null;
+        }),
+    ]);
     if (!snap.exists())
         throw new Error("Event not found.");
     const data = snap.data();
-    if (mode === "read")
-        assertEventReadable(data, uid);
-    else
-        assertEventAccess(data, uid, mode);
+    const allowed = grant === null
+        ? legacyEventAllowsMode(data, uid, mode)
+        : data.ownerId === uid || (grant.exists() && grantAllowsMode(grant.data(), mode));
+    if (!allowed) {
+        throw new Error(`Event does not grant ${mode} access to this organizer.`);
+    }
     if (data.trashedAt && mode !== "read" && mode !== "delete") {
         throw new Error("Event is in trash. Restore it before making changes or live actions.");
     }
@@ -1047,7 +1062,7 @@ function initialEventAccess(uid) {
         notificationSenders: [uid],
     };
 }
-async function addEventWithRtdbMirror(uid, workspaceId, eventData) {
+async function addEventWithRtdbMirror(eventData) {
     const eventRef = await addDoc(collection(firestore, "events"), eventData);
     try {
         const ensureRuntime = httpsCallable(functions, "ensureEventRuntime");
@@ -1328,7 +1343,7 @@ export function registerTools(server) {
             ],
             returns: "uid, updated field names, and the resulting profile snapshot.",
             examples: ["Use when the organizer asks to change their visible OKO name or timezone."],
-            notes: ["This edits only the current organizer's own userProfiles document and does not require extra workspace/event scopes."],
+            notes: ["Edits the organizer profile that owns this key. Requires workspace:write: the key holder is not necessarily the organizer, so a read-only key must not rewrite the owner's name, avatar or timezone."],
         }),
         inputSchema: {
             displayName: profileDisplayNameSchema.optional().describe("Display name, max 40 chars. Null clears it."),
@@ -1337,7 +1352,7 @@ export function registerTools(server) {
         outputSchema: profileOutputSchema,
         annotations: idempotentWriteTool,
     }, async ({ displayName, timezone }) => {
-        const { uid } = await authed([]);
+        const { uid } = await authed(["workspace:write"]);
         const patch = { updatedAt: serverTimestamp() };
         if (displayName !== undefined)
             patch.displayName = displayName?.trim() || null;
@@ -1449,11 +1464,17 @@ export function registerTools(server) {
         ]);
         const members = [];
         for (const share of sharesSnap.docs) {
-            const profileSnap = await getDoc(doc(firestore, "userProfiles", share.id));
+            // Правила разрешают читать чужой профиль только владельцу платформы,
+            // поэтому на любом рабочем пространстве с участниками это чтение
+            // заканчивается отказом. Без обработки инструмент падал целиком вместо
+            // того, чтобы вернуть состав команды без необязательных профилей.
+            const profile = await getDoc(doc(firestore, "userProfiles", share.id))
+                .then((snap) => (snap.exists() ? serialize(snap.data()) : null))
+                .catch(() => null);
             members.push({
                 uid: share.id,
                 ...serialize(share.data()),
-                profile: profileSnap.exists() ? serialize(profileSnap.data()) : null,
+                profile,
             });
         }
         const invites = invitesSnap.docs.map((invite) => ({ code: invite.id, ...serialize(invite.data()) }));
@@ -1466,7 +1487,7 @@ export function registerTools(server) {
             args: ["workspaceId: workspace owned by the organizer.", "uid: member uid.", "permissions: 9 workspace permission booleans.", "confirm: must be true."],
             returns: "workspaceId, uid, and updated=true.",
             examples: ["Use to change an existing member's permissions, or direct-add a known uid."],
-            notes: ["Changing a share triggers OKO CF18 fan-out to event access, RTDB workspaceMembers, and chat roles."],
+            notes: ["Changing a share materializes lightweight event grants and updates RTDB workspace/chat mirrors."],
         }),
         inputSchema: {
             workspaceId: z.string().min(1),
@@ -1498,7 +1519,7 @@ export function registerTools(server) {
             args: ["workspaceId: workspace owned by the organizer.", "uid: member uid.", "confirm: must be true."],
             returns: "workspaceId, uid, removed=true.",
             examples: ["Use after listing workspace access and confirming the exact uid."],
-            notes: ["Removing a share triggers OKO CF18 reverse fan-out."],
+            notes: ["Removing a share revokes its event grants and RTDB workspace/chat mirrors."],
         }),
         inputSchema: { workspaceId: z.string().min(1), uid: z.string().min(1), confirm: z.boolean().optional().describe("Required true for member removal.") },
         outputSchema: z.object({ workspaceId: z.string(), uid: z.string(), removed: z.boolean() }).passthrough(),
@@ -1583,7 +1604,7 @@ export function registerTools(server) {
             args: [
                 "limit: maximum events to return, default 30, max 100.",
                 "cursor: timestamp cursor returned as nextCursor by the previous page.",
-                "workspaceId: optional client-side workspace filter.",
+                "workspaceId: optional workspace filter.",
             ],
             returns: "events plus count, limit, hasMore/has_more, nextCursor/next_cursor.",
             examples: ["Use limit=10 first; if hasMore is true, call again with cursor=nextCursor."],
@@ -1598,17 +1619,42 @@ export function registerTools(server) {
     }, async (args) => {
         const { uid } = await authed(["events:read"]);
         const constraints = [
-            where("accessibleBy", "array-contains", uid),
+            ...(args.workspaceId ? [where("workspaceId", "==", args.workspaceId)] : []),
             orderBy("createdAt", "desc"),
             limit(args.limit + 1),
         ];
         if (args.cursor)
-            constraints.splice(2, 0, startAfter(parseTimestampCursor(args.cursor)));
-        const snap = await getDocs(query(collection(firestore, "events"), ...constraints));
-        const { page, hasMore } = pickPage(snap.docs, args.limit);
-        let events = page.map((item) => ({ id: item.id, ...serialize(item.data()) }));
-        if (args.workspaceId)
-            events = events.filter((event) => event.workspaceId === args.workspaceId);
+            constraints.splice(constraints.length - 1, 0, startAfter(parseTimestampCursor(args.cursor)));
+        const snap = await getDocs(query(collection(firestore, "eventAccess", uid, "grants"), ...constraints)).catch((error) => {
+            if (!isFirestorePermissionDenied(error))
+                throw error;
+            return null;
+        });
+        if (snap !== null) {
+            const { page, hasMore } = pickPage(snap.docs, args.limit);
+            const eventDocuments = await Promise.all(page.map((item) => (getDoc(doc(firestore, "events", item.id)))));
+            const events = eventDocuments.flatMap((item) => (item.exists()
+                ? [{ id: item.id, ...serialize(item.data()) }]
+                : []));
+            const nextCursor = hasMore ? timestampCursorFrom(page.at(-1)?.data().createdAt) : null;
+            return textResult({ events, ...cursorMeta(events.length, args.limit, hasMore, nextCursor) });
+        }
+        const legacyConstraints = [
+            where("accessibleBy", "array-contains", uid),
+            orderBy("createdAt", "desc"),
+            limit(args.limit + 1),
+        ];
+        if (args.cursor) {
+            legacyConstraints.splice(legacyConstraints.length - 1, 0, startAfter(parseTimestampCursor(args.cursor)));
+        }
+        const legacySnap = await getDocs(query(collection(firestore, "events"), ...legacyConstraints));
+        const { page, hasMore } = pickPage(legacySnap.docs, args.limit);
+        const events = page
+            .map((item) => ({
+            id: item.id,
+            ...serialize(item.data()),
+        }))
+            .filter((event) => !args.workspaceId || event.workspaceId === args.workspaceId);
         const nextCursor = hasMore ? timestampCursorFrom(page.at(-1)?.data().createdAt) : null;
         return textResult({ events, ...cursorMeta(events.length, args.limit, hasMore, nextCursor) });
     });
@@ -1679,7 +1725,7 @@ export function registerTools(server) {
         const workspaceId = args.workspaceId ?? uid;
         await assertCanCreateInWorkspace(uid, workspaceId);
         const video = normalizeVideo(args.videoUrl);
-        const docRef = await addEventWithRtdbMirror(uid, workspaceId, {
+        const docRef = await addEventWithRtdbMirror({
             ownerId: uid,
             workspaceId,
             ...initialEventAccess(uid),
@@ -1703,9 +1749,12 @@ export function registerTools(server) {
         title: "Update event metadata",
         description: toolDescription({
             summary: "Update safe top-level event/setup metadata fields.",
-            args: ["eventId plus any subset of title, videoUrl, eventDate, speakerName, description, pinned."],
+            args: ["eventId plus any subset of title, videoUrl, eventDate, speakerName, description, pinned, sessionMode, durationMinutes."],
             returns: "event id and the list of Firestore fields updated.",
             examples: ["Use for title/date/speaker/video edits; use oko_configure_blocks for blocks and forms."],
+            notes: [
+                "sessionMode 'schedule' makes OKO start and end the analytics session automatically at eventDate for durationMinutes; 'manual' keeps the Start/End buttons and a Telegram reminder 10 minutes before eventDate. This is still an analytics session, not an event status.",
+            ],
         }),
         inputSchema: {
             eventId: eventIdField,
@@ -1715,6 +1764,8 @@ export function registerTools(server) {
             speakerName: z.string().max(160).nullable().optional().describe("New speaker display name, or null to clear."),
             description: z.string().max(3000).nullable().optional().describe("New description, or null to clear."),
             pinned: z.boolean().optional().describe("Whether this event is pinned in the dashboard."),
+            sessionMode: z.enum(["manual", "schedule"]).optional().describe("Analytics session mode: manual Start/End buttons, or automatic start/end on schedule at eventDate."),
+            durationMinutes: z.number().int().min(15).max(1440).optional().describe("Event duration in minutes (15-1440) used by schedule mode to end the session."),
         },
         outputSchema: updateOutputSchema,
         annotations: writeTool,
@@ -1725,7 +1776,9 @@ export function registerTools(server) {
         if (args.videoUrl !== undefined
             || args.eventDate !== undefined
             || args.speakerName !== undefined
-            || args.description !== undefined) {
+            || args.description !== undefined
+            || args.sessionMode !== undefined
+            || args.durationMinutes !== undefined) {
             requiredScopes.add("setup:write");
         }
         if (requiredScopes.size === 0)
@@ -1748,6 +1801,10 @@ export function registerTools(server) {
             patch["meta.description"] = args.description?.trim() || null;
         if (args.pinned !== undefined)
             patch.pinned = args.pinned;
+        if (args.sessionMode !== undefined)
+            patch.analyticsSessionMode = args.sessionMode;
+        if (args.durationMinutes !== undefined)
+            patch["meta.durationMinutes"] = args.durationMinutes;
         await updateDoc(doc(firestore, "events", args.eventId), patch);
         return textResult({ id: args.eventId, updated: Object.keys(patch) });
     });
@@ -2222,7 +2279,7 @@ export function registerTools(server) {
         const source = await readEvent(eventId, uid, "read");
         const workspaceId = targetWorkspaceId ?? safeString(source.workspaceId, uid);
         await assertCanCreateInWorkspace(uid, workspaceId);
-        const newRef = await addEventWithRtdbMirror(uid, workspaceId, {
+        const newRef = await addEventWithRtdbMirror({
             ownerId: uid,
             workspaceId,
             ...initialEventAccess(uid),
@@ -2288,6 +2345,9 @@ export function registerTools(server) {
             args: ["eventId: event to control.", "block: chat, banner, cta, cards, or placeholder.", "visible: true/false, or null to reset override.", "confirm: must be true."],
             returns: "eventId, block, and effective override value.",
             examples: ["Use visible=false to hide the CTA live; use visible=null to return to setup defaults."],
+            notes: [
+                "block=chat with visible=false PAUSES message input: viewers keep seeing the chat history but cannot send. It does not hide the chat panel.",
+            ],
         }),
         inputSchema: {
             eventId: eventIdField,

package/dist/utils.js

@@ -19,9 +19,6 @@ export function serialize(value) {
     }
     return out;
 }
-export function docJson(snap) {
-    return { id: snap.id, ...serialize(snap.data()) };
-}
 function compactForText(value, depth = 0) {
     if (typeof value === "string" && value.length > MAX_COMPACT_STRING_LENGTH) {
         return `${value.slice(0, MAX_COMPACT_STRING_LENGTH)}... [truncated ${value.length - MAX_COMPACT_STRING_LENGTH} chars]`;

package/dist/version.js

@@ -1,2 +1,2 @@
 // Generated by scripts/generateMcpVersion.mjs from mcp/package.json. Do not edit.
-export const OKO_MCP_VERSION = "0.9.2";
+export const OKO_MCP_VERSION = "0.10.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okostream/mcp",
-  "version": "0.9.2",
+  "version": "0.10.0",
   "description": "Control OKO Stream webinars from Claude, Codex, and other MCP clients.",
   "license": "UNLICENSED",
   "author": {
@@ -50,7 +50,7 @@
     "dotenv": "^17.2.3",
     "firebase": "^12.16.0",
     "ipaddr.js": "2.4.0",
-    "undici": "7.28.0",
+    "undici": "7.29.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {