vibo-mcp 1.3.2 → 1.4.1

package/dist/bundle.js

@@ -31120,7 +31120,7 @@ function toolAnnotations(opts = {}) {
 }
 
 // src/version.ts
-var VERSION = "1.3.2";
+var VERSION = "1.4.1";
 
 // src/client.ts
 import { dirname as dirname2, join as join2 } from "path";
@@ -31299,8 +31299,11 @@ function saveSession(session) {
 }
 
 // src/client.ts
-var __dirname = dirname2(fileURLToPath(import.meta.url));
-await loadDotenvSafely({ path: join2(__dirname, "..", ".env"), override: false });
+try {
+  const __dirname = dirname2(fileURLToPath(import.meta.url));
+  await loadDotenvSafely({ path: join2(__dirname, "..", ".env"), override: false });
+} catch {
+}
 var DEFAULT_API_URL = "https://api.vibodj.com/v2/graphql";
 var SERVICE = "Vibo";
 var SIGN_IN_HOST = "https://web.vibodj.com";
@@ -31327,24 +31330,37 @@ var ViboClient = class {
   email;
   password;
   // Not readonly: cleared by setTokens() after a browser capture seeds a session.
-  configError;
+  configError = null;
   accessToken;
   refreshTokenValue;
+  // The constructor is PURE — it does no filesystem / homedir / async-I/O /
+  // random op — so it is safe to run at Worker global scope (where the
+  // module-level `export const client` singleton below is constructed). The
+  // saved-session fallback and the config-error determination both touch
+  // homedir()/the filesystem via loadSession(), so they are deferred to the
+  // first request through `ensureConfigResolved()`. No effect on the stdio path.
+  configResolved = false;
   // Single-flight guards so concurrent tool calls never race two logins /
   // refreshes against each other (à la mcp-utils' TokenManager).
   loginInFlight = null;
   reauthInFlight = null;
-  constructor() {
-    this.apiUrl = readEnvVar("VIBO_API_URL") ?? DEFAULT_API_URL;
-    const email3 = readEnvVar("VIBO_EMAIL");
-    const password = readEnvVar("VIBO_PASSWORD");
-    const accessToken = readEnvVar("VIBO_ACCESS_TOKEN");
-    const refreshToken = readEnvVar("VIBO_REFRESH_TOKEN");
-    this.email = email3 ?? null;
-    this.password = password ?? null;
-    this.accessToken = accessToken ?? null;
-    this.refreshTokenValue = refreshToken ?? null;
-    const haveLogin = Boolean(email3 && password);
+  constructor(opts = {}) {
+    this.apiUrl = opts.apiUrl ?? readEnvVar("VIBO_API_URL") ?? DEFAULT_API_URL;
+    this.email = opts.email ?? readEnvVar("VIBO_EMAIL") ?? null;
+    this.password = opts.password ?? readEnvVar("VIBO_PASSWORD") ?? null;
+    this.accessToken = opts.accessToken ?? readEnvVar("VIBO_ACCESS_TOKEN") ?? null;
+    this.refreshTokenValue = opts.refreshToken ?? readEnvVar("VIBO_REFRESH_TOKEN") ?? null;
+  }
+  /**
+   * Resolve the saved-session fallback and the deferred config error on first
+   * use. Kept out of the constructor so construction is pure (Worker-safe):
+   * `loadSession()` reads homedir()/the filesystem, which the Workers runtime
+   * forbids at global scope. Runs its body at most once.
+   */
+  ensureConfigResolved() {
+    if (this.configResolved) return;
+    this.configResolved = true;
+    const haveLogin = Boolean(this.email && this.password);
     if (!this.accessToken && !haveLogin) {
       const saved = loadSession();
       if (saved) {
@@ -31360,8 +31376,6 @@ var ViboClient = class {
           hint: "Set VIBO_EMAIL and VIBO_PASSWORD (recommended); paste a captured VIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN); or run vibo_capture_session to grab the token from your signed-in web.vibodj.com browser tab (Apple/Google/Facebook accounts)."
         }
       );
-    } else {
-      this.configError = null;
     }
   }
   /**
@@ -31382,6 +31396,7 @@ var ViboClient = class {
   }
   /** Run a GraphQL operation, transparently authenticating + retrying once on token expiry. */
   async gql(query, variables = {}) {
+    this.ensureConfigResolved();
     if (this.configError) throw this.configError;
     const token = await this.ensureAccessToken();
     let res = await this.post(query, variables, token);
@@ -31393,44 +31408,38 @@ var ViboClient = class {
   }
   /**
    * Run a GraphQL operation that uploads one or more files (the `Upload` scalar),
-   * using the graphql-multipart-request spec. `fileMap` maps a dotted variable
-   * path (e.g. "variables.photo" or "variables.payload.answer.images.0") to a
-   * local file path; `variables` must carry `null` at each of those positions.
-   * Same auth + single-retry-on-expiry behavior as `gql`.
+   * using the graphql-multipart-request spec. `files` maps a dotted variable
+   * path (e.g. "variables.photo" or "variables.payload.answer.images.0") to an
+   * in-memory {@link UploadFile} (blob + filename); `variables` must carry
+   * `null` at each of those positions. The bytes arrive already resolved (from
+   * a local file on stdio, or inline base64 on the hosted connector — see
+   * src/upload-source.ts), so this method never touches the filesystem and runs
+   * unchanged in the Workers runtime (`FormData`/`Blob`/`fetch` are all
+   * available there). Same auth + single-retry-on-expiry behavior as `gql`.
    */
-  async gqlUpload(query, variables, fileMap) {
+  async gqlUpload(query, variables, files) {
+    this.ensureConfigResolved();
     if (this.configError) throw this.configError;
     const token = await this.ensureAccessToken();
-    let res = await this.postMultipart(query, variables, fileMap, token);
+    let res = await this.postMultipart(query, variables, files, token);
     if (this.isAuthError(res.status, res.body.errors)) {
       const fresh = await this.reauthenticate();
-      res = await this.postMultipart(query, variables, fileMap, fresh);
+      res = await this.postMultipart(query, variables, files, fresh);
     }
     return this.unwrap(res.status, res.body);
   }
-  async postMultipart(query, variables, fileMap, token) {
-    const { openAsBlob } = await import("node:fs");
-    const { basename } = await import("node:path");
+  async postMultipart(query, variables, files, token) {
     const form = new FormData();
     form.append("operations", JSON.stringify({ query, variables }));
-    const paths = Object.keys(fileMap);
+    const paths = Object.keys(files);
     const map2 = {};
     paths.forEach((varPath, i) => {
       map2[String(i)] = [varPath];
     });
     form.append("map", JSON.stringify(map2));
     for (let i = 0; i < paths.length; i++) {
-      const filePath = fileMap[paths[i]];
-      let blob;
-      try {
-        blob = await openAsBlob(filePath);
-      } catch (err) {
-        throw new McpToolError(`Could not read file for upload: ${filePath}`, {
-          hint: "Provide an absolute path to a readable local file.",
-          cause: err
-        });
-      }
-      form.append(String(i), blob, basename(filePath));
+      const file2 = files[paths[i]];
+      form.append(String(i), file2.blob, file2.filename);
     }
     const headers = { "apollo-require-preflight": "true" };
     if (token) headers["x-token"] = token;
@@ -31892,7 +31901,7 @@ var UPLOAD_USER_PHOTO = `
 `;
 
 // src/tools/profile.ts
-function registerProfileTools(server) {
+function registerProfileTools(server, client2) {
   server.registerTool(
     "vibo_get_me",
     {
@@ -31900,7 +31909,7 @@ function registerProfileTools(server) {
       annotations: toolAnnotations({ title: "Get my Vibo profile", readOnly: true })
     },
     async () => {
-      const data = await client.gql(GET_ME);
+      const data = await client2.gql(GET_ME);
       return textResult(data.me);
     }
   );
@@ -31911,7 +31920,7 @@ function registerProfileTools(server) {
       annotations: toolAnnotations({ title: "Vibo healthcheck", readOnly: true })
     },
     async () => {
-      const data = await client.gql(GET_ME);
+      const data = await client2.gql(GET_ME);
       return textResult({ ok: true, userId: data.me._id, email: data.me.email });
     }
   );
@@ -31923,6 +31932,10 @@ var skipSchema = external_exports.number().int().min(0).optional().describe("Num
 function pagination(limit, skip) {
   return { skip: skip ?? 0, limit: limit ?? 20 };
 }
+var inlineFileSchema = external_exports.object({
+  data: external_exports.string().describe("Base64-encoded file bytes (a `data:` URL prefix is allowed)."),
+  filename: external_exports.string().optional().describe("Filename to send with this file.")
+});
 function previewResult(action, willSend) {
   return textResult({
     preview: true,
@@ -31933,7 +31946,7 @@ function previewResult(action, willSend) {
 }
 
 // src/tools/events.ts
-function registerEventTools(server) {
+function registerEventTools(server, client2) {
   server.registerTool(
     "vibo_list_events",
     {
@@ -31952,7 +31965,7 @@ function registerEventTools(server) {
         ...q ? { filter: { q } } : {}
       };
       const doc = past ? LIST_HISTORY_EVENTS : LIST_UPCOMING_EVENTS;
-      const data = await client.gql(doc, variables);
+      const data = await client2.gql(doc, variables);
       return textResult(past ? data.historyEvents : data.upcomingEvents);
     }
   );
@@ -31966,7 +31979,7 @@ function registerEventTools(server) {
       }
     },
     async ({ eventId }) => {
-      const data = await client.gql(GET_EVENT, { eventId });
+      const data = await client2.gql(GET_EVENT, { eventId });
       return textResult(data.event);
     }
   );
@@ -31986,12 +31999,12 @@ function registerEventTools(server) {
         return previewResult("joinEvent", isUrl ? { deepLink: link } : { hash: link });
       }
       if (isUrl) {
-        const data2 = await client.gql(JOIN_EVENT_BY_DEEP_LINK, {
+        const data2 = await client2.gql(JOIN_EVENT_BY_DEEP_LINK, {
           deepLink: link
         });
         return textResult({ joined: true, eventId: data2.joinEventViaDeepLink._id });
       }
-      const data = await client.gql(JOIN_EVENT_BY_HASH, { hash: link });
+      const data = await client2.gql(JOIN_EVENT_BY_HASH, { hash: link });
       return textResult({ joined: true, eventId: data.joinEventByHash._id });
     }
   );
@@ -32007,7 +32020,7 @@ function registerEventTools(server) {
     },
     async ({ eventId, confirm }) => {
       if (!confirm) return previewResult("leaveEvent", { eventId });
-      const data = await client.gql(LEAVE_EVENT, { eventId });
+      const data = await client2.gql(LEAVE_EVENT, { eventId });
       return textResult({ left: true, eventId, result: data.leaveEvent });
     }
   );
@@ -32039,14 +32052,14 @@ function registerEventTools(server) {
         });
       }
       if (!confirm) return previewResult("createEventContact", { eventId, payload });
-      const data = await client.gql(CREATE_EVENT_CONTACT, { eventId, payload });
+      const data = await client2.gql(CREATE_EVENT_CONTACT, { eventId, payload });
       return textResult(data.createEventContact);
     }
   );
 }
 
 // src/tools/sections.ts
-function registerSectionTools(server) {
+function registerSectionTools(server, client2) {
   server.registerTool(
     "vibo_list_sections",
     {
@@ -32057,14 +32070,14 @@ function registerSectionTools(server) {
       }
     },
     async ({ eventId }) => {
-      const data = await client.gql(LIST_SECTIONS, { eventId });
+      const data = await client2.gql(LIST_SECTIONS, { eventId });
       return textResult(data.sections);
     }
   );
 }
 
 // src/tools/songs.ts
-function registerSongTools(server) {
+function registerSongTools(server, client2) {
   server.registerTool(
     "vibo_get_section_songs",
     {
@@ -32094,7 +32107,7 @@ function registerSongTools(server) {
         ...Object.keys(filter).length ? { filter } : {},
         ...sortField ? { sort: { field: sortField, direction: sortDirection ?? "desc" } } : {}
       };
-      const data = await client.gql(GET_SECTION_SONGS, variables);
+      const data = await client2.gql(GET_SECTION_SONGS, variables);
       return textResult(data.getSectionSongs);
     }
   );
@@ -32112,7 +32125,7 @@ function registerSongTools(server) {
       }
     },
     async ({ eventId, sectionId, query, source, limit }) => {
-      const data = await client.gql(SEARCH_SONGS, {
+      const data = await client2.gql(SEARCH_SONGS, {
         eventId,
         sectionId,
         filter: { q: query, source: source ?? "searchField" },
@@ -32143,7 +32156,7 @@ function registerSongTools(server) {
       if (artist !== void 0) song.artist = artist;
       const payload = { song };
       if (!confirm) return previewResult("addSongToSection", { eventId, sectionId, payload });
-      const data = await client.gql(ADD_SONG_TO_SECTION, {
+      const data = await client2.gql(ADD_SONG_TO_SECTION, {
         eventId,
         sectionId,
         payload
@@ -32166,7 +32179,7 @@ function registerSongTools(server) {
     },
     async ({ eventId, sectionId, songId, liked, confirm }) => {
       if (!confirm) return previewResult("toggleLike", { eventId, sectionId, songId, liked });
-      const data = await client.gql(TOGGLE_LIKE, {
+      const data = await client2.gql(TOGGLE_LIKE, {
         eventId,
         sectionId,
         songId,
@@ -32179,7 +32192,7 @@ function registerSongTools(server) {
 
 // src/tools/playlists.ts
 var sourceSchema = external_exports.enum(["spotify", "appleMusic"]).describe("Streaming source \u2014 must be connected to your Vibo account.");
-function registerPlaylistTools(server) {
+function registerPlaylistTools(server, client2) {
   server.registerTool(
     "vibo_get_playlists",
     {
@@ -32193,7 +32206,7 @@ function registerPlaylistTools(server) {
       }
     },
     async ({ source, q, limit, skip }) => {
-      const data = await client.gql(GET_PLAYLISTS, {
+      const data = await client2.gql(GET_PLAYLISTS, {
         source,
         pagination: pagination(limit, skip),
         ...q ? { filter: { q } } : {}
@@ -32214,7 +32227,7 @@ function registerPlaylistTools(server) {
       }
     },
     async ({ playlistId, source, limit, skip }) => {
-      const data = await client.gql(GET_PLAYLIST_SONGS, {
+      const data = await client2.gql(GET_PLAYLIST_SONGS, {
         playlistId,
         source,
         pagination: pagination(limit, skip)
@@ -32240,7 +32253,7 @@ function registerPlaylistTools(server) {
       if (title !== void 0) variables.title = title;
       if (onlyFlagged !== void 0) variables.filter = { isFlagged: onlyFlagged };
       if (!confirm) return previewResult("exportEventToSpotify", variables);
-      const data = await client.gql(EXPORT_EVENT_TO_SPOTIFY, variables);
+      const data = await client2.gql(EXPORT_EVENT_TO_SPOTIFY, variables);
       return textResult(data.exportEventToSpotify);
     }
   );
@@ -32262,14 +32275,14 @@ function registerPlaylistTools(server) {
       if (title !== void 0) variables.title = title;
       if (onlyFlagged !== void 0) variables.filter = { isFlagged: onlyFlagged };
       if (!confirm) return previewResult("exportEventToAppleMusic", variables);
-      const data = await client.gql(EXPORT_EVENT_TO_APPLE_MUSIC, variables);
+      const data = await client2.gql(EXPORT_EVENT_TO_APPLE_MUSIC, variables);
       return textResult(data.exportEventToAppleMusic);
     }
   );
 }
 
 // src/tools/notifications.ts
-function registerNotificationTools(server) {
+function registerNotificationTools(server, client2) {
   server.registerTool(
     "vibo_list_notifications",
     {
@@ -32281,7 +32294,7 @@ function registerNotificationTools(server) {
       }
     },
     async ({ limit, skip }) => {
-      const data = await client.gql(GET_NOTIFICATIONS, {
+      const data = await client2.gql(GET_NOTIFICATIONS, {
         pagination: pagination(limit, skip)
       });
       return textResult(data.getNotifications);
@@ -32294,7 +32307,7 @@ function registerNotificationTools(server) {
       annotations: toolAnnotations({ title: "Unread notification count", readOnly: true })
     },
     async () => {
-      const data = await client.gql(GET_NOTIFICATIONS_COUNT);
+      const data = await client2.gql(GET_NOTIFICATIONS_COUNT);
       return textResult(data.getNotificationsCount);
     }
   );
@@ -32319,14 +32332,52 @@ function registerNotificationTools(server) {
       if (notificationIds?.length) variables.notificationIds = notificationIds;
       if (readAll) variables.readAll = true;
       if (!confirm) return previewResult("markAsRead", variables);
-      const data = await client.gql(MARK_AS_READ, variables);
+      const data = await client2.gql(MARK_AS_READ, variables);
       return textResult({ marked: true, result: data.markAsRead });
     }
   );
 }
 
+// src/upload-source.ts
+var DEFAULT_FILENAME = "upload";
+function blobFromBase64(data, filename) {
+  const base643 = data.includes(",") && data.startsWith("data:") ? data.slice(data.indexOf(",") + 1) : data;
+  let binary;
+  try {
+    binary = atob(base643.trim());
+  } catch (err) {
+    throw new McpToolError("Could not decode inline file data \u2014 expected base64.", {
+      hint: "Pass the file bytes as a base64 string in `fileData` (a `data:` URL prefix is allowed).",
+      cause: err
+    });
+  }
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return { blob: new Blob([bytes]), filename: filename ?? DEFAULT_FILENAME };
+}
+var nodeUploadResolver = async (ref) => {
+  if (ref.path) {
+    const { openAsBlob } = await import("node:fs");
+    const { basename } = await import("node:path");
+    let blob;
+    try {
+      blob = await openAsBlob(ref.path);
+    } catch (err) {
+      throw new McpToolError(`Could not read file for upload: ${ref.path}`, {
+        hint: "Provide an absolute path to a readable local file.",
+        cause: err
+      });
+    }
+    return { blob, filename: ref.filename ?? basename(ref.path) };
+  }
+  if (ref.data) return blobFromBase64(ref.data, ref.filename);
+  throw new McpToolError("No file provided for upload.", {
+    hint: "Pass a local file `path` (or inline base64 `fileData`)."
+  });
+};
+
 // src/tools/questions.ts
-function registerQuestionTools(server) {
+function registerQuestionTools(server, client2, resolveUpload = nodeUploadResolver) {
   server.registerTool(
     "vibo_list_section_questions",
     {
@@ -32338,7 +32389,7 @@ function registerQuestionTools(server) {
       }
     },
     async ({ eventId, sectionId }) => {
-      const data = await client.gql(LIST_SECTION_QUESTIONS, {
+      const data = await client2.gql(LIST_SECTION_QUESTIONS, {
         eventId,
         sectionId
       });
@@ -32348,7 +32399,7 @@ function registerQuestionTools(server) {
   server.registerTool(
     "vibo_answer_question",
     {
-      description: "Answer a section planning question. Provide the field matching the question's type: `text` for a text question, `selectedOptions` (array of option _ids from vibo_list_section_questions) for radio/checkbox/select, or `link` (array of URLs) for a link question. Use `otherOptionTitle` with the question's \"other\" option. For photo/file questions, pass `imagePaths` / `filePaths` (absolute local paths). Confirm-gated.",
+      description: "Answer a section planning question. Provide the field matching the question's type: `text` for a text question, `selectedOptions` (array of option _ids from vibo_list_section_questions) for radio/checkbox/select, or `link` (array of URLs) for a link question. Use `otherOptionTitle` with the question's \"other\" option. For photo/file questions, pass local paths (`imagePaths`/`filePaths`) on the stdio server, or inline base64 bytes (`images`/`files`) on the hosted connector. Confirm-gated.",
       annotations: toolAnnotations({ title: "Answer Vibo question", readOnly: false }),
       inputSchema: {
         eventId: external_exports.string().describe("Event id."),
@@ -32358,17 +32409,27 @@ function registerQuestionTools(server) {
         selectedOptions: external_exports.array(external_exports.string()).optional().describe("Option _ids to select, for radio/checkbox/select questions."),
         link: external_exports.array(external_exports.string()).optional().describe("URL(s), for a link question."),
         otherOptionTitle: external_exports.string().optional().describe(`Free-text value when selecting the question's "other" option.`),
-        imagePaths: external_exports.array(external_exports.string()).optional().describe("Absolute local image file paths, for a photo question."),
-        filePaths: external_exports.array(external_exports.string()).optional().describe("Absolute local file paths, for a file-attachment question."),
+        imagePaths: external_exports.array(external_exports.string()).optional().describe("Absolute local image file paths, for a photo question (local/stdio server only)."),
+        filePaths: external_exports.array(external_exports.string()).optional().describe("Absolute local file paths, for a file-attachment question (local/stdio server only)."),
+        images: external_exports.array(inlineFileSchema).optional().describe("Inline base64 images, for a photo question (used by the hosted connector, which has no filesystem)."),
+        files: external_exports.array(inlineFileSchema).optional().describe("Inline base64 files, for a file-attachment question (used by the hosted connector)."),
         confirm: schemaConfirm
       }
     },
-    async ({ eventId, sectionId, questionId, text, selectedOptions, link, otherOptionTitle, imagePaths, filePaths, confirm }) => {
-      const hasImages = (imagePaths?.length ?? 0) > 0;
-      const hasFiles = (filePaths?.length ?? 0) > 0;
+    async ({ eventId, sectionId, questionId, text, selectedOptions, link, otherOptionTitle, imagePaths, filePaths, images, files, confirm }) => {
+      const imageRefs = [
+        ...(imagePaths ?? []).map((path) => ({ path })),
+        ...(images ?? []).map((f) => ({ data: f.data, filename: f.filename }))
+      ];
+      const fileRefs = [
+        ...(filePaths ?? []).map((path) => ({ path })),
+        ...(files ?? []).map((f) => ({ data: f.data, filename: f.filename }))
+      ];
+      const hasImages = imageRefs.length > 0;
+      const hasFiles = fileRefs.length > 0;
       if (text === void 0 && selectedOptions === void 0 && link === void 0 && !hasImages && !hasFiles) {
-        throw new McpToolError("Provide an answer: text, selectedOptions, link, imagePaths, or filePaths.", {
-          hint: "Match the question's type \u2014 text \u2192 `text`, radio/checkbox/select \u2192 `selectedOptions`, link \u2192 `link`, photo/file \u2192 `imagePaths`/`filePaths`."
+        throw new McpToolError("Provide an answer: text, selectedOptions, link, imagePaths/images, or filePaths/files.", {
+          hint: "Match the question's type \u2014 text \u2192 `text`, radio/checkbox/select \u2192 `selectedOptions`, link \u2192 `link`, photo/file \u2192 `imagePaths`/`filePaths` (stdio) or `images`/`files` (hosted connector)."
         });
       }
       const answer = {};
@@ -32377,25 +32438,36 @@ function registerQuestionTools(server) {
       if (link !== void 0) answer.link = link;
       if (otherOptionTitle !== void 0) answer.otherOptionTitle = otherOptionTitle;
       if (hasImages || hasFiles) {
-        if (hasImages) answer.images = imagePaths.map(() => null);
-        if (hasFiles) answer.files = filePaths.map(() => null);
+        if (hasImages) answer.images = imageRefs.map(() => null);
+        if (hasFiles) answer.files = fileRefs.map(() => null);
         const payload2 = { answer };
-        const fileMap = {};
-        (imagePaths ?? []).forEach((p, i) => fileMap[`variables.payload.answer.images.${i}`] = p);
-        (filePaths ?? []).forEach((p, i) => fileMap[`variables.payload.answer.files.${i}`] = p);
+        const previewUploads = {};
+        imageRefs.forEach((ref, i) => {
+          previewUploads[`variables.payload.answer.images.${i}`] = ref.path ?? "(inline bytes)";
+        });
+        fileRefs.forEach((ref, i) => {
+          previewUploads[`variables.payload.answer.files.${i}`] = ref.path ?? "(inline bytes)";
+        });
         if (!confirm) {
-          return previewResult("answerEventSectionQuestionV2", { eventId, sectionId, questionId, payload: payload2, uploads: fileMap });
+          return previewResult("answerEventSectionQuestionV2", { eventId, sectionId, questionId, payload: payload2, uploads: previewUploads });
         }
-        const data2 = await client.gqlUpload(
+        const resolvedFiles = {};
+        for (let i = 0; i < imageRefs.length; i++) {
+          resolvedFiles[`variables.payload.answer.images.${i}`] = await resolveUpload(imageRefs[i]);
+        }
+        for (let i = 0; i < fileRefs.length; i++) {
+          resolvedFiles[`variables.payload.answer.files.${i}`] = await resolveUpload(fileRefs[i]);
+        }
+        const data2 = await client2.gqlUpload(
           ANSWER_SECTION_QUESTION,
           { eventId, sectionId, questionId, payload: payload2 },
-          fileMap
+          resolvedFiles
         );
         return textResult(data2.answerEventSectionQuestionV2);
       }
       const payload = { answer };
       if (!confirm) return previewResult("answerEventSectionQuestionV2", { eventId, sectionId, questionId, payload });
-      const data = await client.gql(ANSWER_SECTION_QUESTION, {
+      const data = await client2.gql(ANSWER_SECTION_QUESTION, {
         eventId,
         sectionId,
         questionId,
@@ -32407,7 +32479,7 @@ function registerQuestionTools(server) {
 }
 
 // src/tools/song-management.ts
-function registerSongManagementTools(server) {
+function registerSongManagementTools(server, client2) {
   server.registerTool(
     "vibo_remove_song_from_section",
     {
@@ -32423,7 +32495,7 @@ function registerSongManagementTools(server) {
     async ({ eventId, sectionId, songIds, confirm }) => {
       const vars = { eventId, sectionId, songIds };
       if (!confirm) return previewResult("removeSectionSongsV2", vars);
-      const data = await client.gql(REMOVE_SECTION_SONGS, vars);
+      const data = await client2.gql(REMOVE_SECTION_SONGS, vars);
       return textResult(data.removeSectionSongsV2);
     }
   );
@@ -32454,7 +32526,7 @@ function registerSongManagementTools(server) {
       }
       const vars = { eventId, sectionId, songIds, payload };
       if (!confirm) return previewResult("updateSectionSongs", vars);
-      const data = await client.gql(UPDATE_SECTION_SONGS, vars);
+      const data = await client2.gql(UPDATE_SECTION_SONGS, vars);
       return textResult(data.updateSectionSongs);
     }
   );
@@ -32474,7 +32546,7 @@ function registerSongManagementTools(server) {
     async ({ eventId, sourceSectionId, targetSectionId, songIds, confirm }) => {
       const vars = { eventId, sourceSectionId, targetSectionId, songIds };
       if (!confirm) return previewResult("moveSectionSongsV2", vars);
-      const data = await client.gql(MOVE_SECTION_SONGS, vars);
+      const data = await client2.gql(MOVE_SECTION_SONGS, vars);
       return textResult(data.moveSectionSongsV2);
     }
   );
@@ -32494,14 +32566,14 @@ function registerSongManagementTools(server) {
     async ({ eventId, sectionId, sourceSongIds, targetSongId, confirm }) => {
       const vars = { eventId, sectionId, sourceSongIds, targetSongId: targetSongId ?? null };
       if (!confirm) return previewResult("reorderSongsBatch", vars);
-      const data = await client.gql(REORDER_SONGS, vars);
+      const data = await client2.gql(REORDER_SONGS, vars);
       return textResult(data.reorderSongsBatch);
     }
   );
 }
 
 // src/tools/comments.ts
-function registerCommentTools(server) {
+function registerCommentTools(server, client2) {
   server.registerTool(
     "vibo_comment_on_song",
     {
@@ -32518,7 +32590,7 @@ function registerCommentTools(server) {
     async ({ eventId, sectionId, songId, message, confirm }) => {
       const vars = { eventId, sectionId, songId, payload: { message } };
       if (!confirm) return previewResult("createSongComment", vars);
-      const data = await client.gql(CREATE_SONG_COMMENT, vars);
+      const data = await client2.gql(CREATE_SONG_COMMENT, vars);
       return textResult(data.createSongComment);
     }
   );
@@ -32538,7 +32610,7 @@ function registerCommentTools(server) {
     async ({ eventId, sectionId, songId, commentId, confirm }) => {
       const vars = { eventId, sectionId, songId, commentId };
       if (!confirm) return previewResult("deleteSongComment", vars);
-      const data = await client.gql(DELETE_SONG_COMMENT, vars);
+      const data = await client2.gql(DELETE_SONG_COMMENT, vars);
       return textResult(data.deleteSongComment);
     }
   );
@@ -32557,7 +32629,7 @@ function registerCommentTools(server) {
     async ({ eventId, sectionId, message, confirm }) => {
       const vars = { eventId, sectionId, payload: { message } };
       if (!confirm) return previewResult("createSectionComment", vars);
-      const data = await client.gql(CREATE_SECTION_COMMENT, vars);
+      const data = await client2.gql(CREATE_SECTION_COMMENT, vars);
       return textResult(data.createSectionComment);
     }
   );
@@ -32576,14 +32648,14 @@ function registerCommentTools(server) {
     async ({ eventId, sectionId, commentId, confirm }) => {
       const vars = { eventId, sectionId, commentId };
       if (!confirm) return previewResult("deleteSectionComment", vars);
-      const data = await client.gql(DELETE_SECTION_COMMENT, vars);
+      const data = await client2.gql(DELETE_SECTION_COMMENT, vars);
       return textResult(data.deleteSectionComment);
     }
   );
 }
 
 // src/tools/ideas.ts
-function registerIdeasTools(server) {
+function registerIdeasTools(server, client2) {
   server.registerTool(
     "vibo_list_section_song_ideas",
     {
@@ -32597,7 +32669,7 @@ function registerIdeasTools(server) {
       }
     },
     async ({ eventId, sectionId, limit, skip }) => {
-      const data = await client.gql(LIST_SECTION_SONG_IDEAS, {
+      const data = await client2.gql(LIST_SECTION_SONG_IDEAS, {
         eventId,
         sectionId,
         pagination: pagination(limit, skip)
@@ -32619,7 +32691,7 @@ function registerIdeasTools(server) {
       }
     },
     async ({ eventId, sectionId, songIdeasId, limit, skip }) => {
-      const data = await client.gql(LIST_SONG_IDEAS_SONGS, {
+      const data = await client2.gql(LIST_SONG_IDEAS_SONGS, {
         eventId,
         sectionId,
         songIdeasId,
@@ -32631,7 +32703,7 @@ function registerIdeasTools(server) {
 }
 
 // src/tools/imports.ts
-function registerImportTools(server) {
+function registerImportTools(server, client2) {
   server.registerTool(
     "vibo_import_playlist_to_section",
     {
@@ -32657,7 +32729,7 @@ function registerImportTools(server) {
         tracksToIgnore: tracksToIgnore ?? []
       };
       if (!confirm) return previewResult("importPlaylistToSectionWeb", vars);
-      const data = await client.gql(
+      const data = await client2.gql(
         IMPORT_PLAYLIST_TO_SECTION,
         vars
       );
@@ -32667,7 +32739,7 @@ function registerImportTools(server) {
 }
 
 // src/tools/collaboration.ts
-function registerCollaborationTools(server) {
+function registerCollaborationTools(server, client2) {
   server.registerTool(
     "vibo_list_event_users",
     {
@@ -32683,7 +32755,7 @@ function registerCollaborationTools(server) {
     async ({ eventId, usersType, limit, skip }) => {
       const page = pagination(limit, skip);
       if (usersType) {
-        const data = await client.gql(LIST_EVENT_USERS, {
+        const data = await client2.gql(LIST_EVENT_USERS, {
           eventId,
           usersType,
           pagination: page
@@ -32691,8 +32763,8 @@ function registerCollaborationTools(server) {
         return textResult({ ...data.eventUsers, usersType });
       }
       const [hosts, guests] = await Promise.all([
-        client.gql(LIST_EVENT_USERS, { eventId, usersType: "host", pagination: page }),
-        client.gql(LIST_EVENT_USERS, { eventId, usersType: "guest", pagination: page })
+        client2.gql(LIST_EVENT_USERS, { eventId, usersType: "host", pagination: page }),
+        client2.gql(LIST_EVENT_USERS, { eventId, usersType: "guest", pagination: page })
       ]);
       return textResult({
         hosts: hosts.eventUsers.users,
@@ -32718,7 +32790,7 @@ function registerCollaborationTools(server) {
     async ({ eventId, type, text, emails, confirm }) => {
       const variables = { eventId, type, text, emails };
       if (!confirm) return previewResult("inviteUserViaEmail", variables);
-      const data = await client.gql(INVITE_USERS, variables);
+      const data = await client2.gql(INVITE_USERS, variables);
       return textResult(data.inviteUserViaEmail);
     }
   );
@@ -32737,7 +32809,7 @@ function registerCollaborationTools(server) {
     async ({ eventId, userId, type, confirm }) => {
       const variables = { eventId, userId, type };
       if (!confirm) return previewResult("changeUserTypeInEvent", variables);
-      const data = await client.gql(CHANGE_USER_ROLE, variables);
+      const data = await client2.gql(CHANGE_USER_ROLE, variables);
       return textResult(data.changeUserTypeInEvent);
     }
   );
@@ -32755,14 +32827,14 @@ function registerCollaborationTools(server) {
     async ({ eventId, userId, confirm }) => {
       const variables = { eventId, userId };
       if (!confirm) return previewResult("removeUserFromEvent", variables);
-      const data = await client.gql(REMOVE_USER, variables);
+      const data = await client2.gql(REMOVE_USER, variables);
       return textResult(data.removeUserFromEvent);
     }
   );
 }
 
 // src/tools/section-edit.ts
-function registerSectionEditTools(server) {
+function registerSectionEditTools(server, client2) {
   server.registerTool(
     "vibo_update_section",
     {
@@ -32791,30 +32863,38 @@ function registerSectionEditTools(server) {
       }
       const vars = { eventId, sectionId, payload };
       if (!confirm) return previewResult("updateSection", vars);
-      const data = await client.gql(UPDATE_SECTION, vars);
+      const data = await client2.gql(UPDATE_SECTION, vars);
       return textResult(data.updateSection);
     }
   );
 }
 
 // src/tools/uploads.ts
-function registerUploadTools(server) {
+function registerUploadTools(server, client2, resolveUpload = nodeUploadResolver) {
   server.registerTool(
     "vibo_set_profile_photo",
     {
-      description: "Set your Vibo profile photo from a local image file. Returns the uploaded image URL. Confirm-gated.",
+      description: "Set your Vibo profile photo from an image. On the local (stdio) server pass a local file `path`; on the hosted connector pass the image bytes as base64 `fileData`. Returns the uploaded image URL. Confirm-gated.",
       annotations: toolAnnotations({ title: "Set Vibo profile photo", readOnly: false }),
       inputSchema: {
-        path: external_exports.string().describe("Absolute path to a local image file (jpg/png)."),
+        path: external_exports.string().optional().describe("Absolute path to a local image file (jpg/png). Local/stdio server only."),
+        fileData: external_exports.string().optional().describe("Base64-encoded image bytes (a `data:` URL prefix is allowed). Used by the hosted connector, which has no filesystem."),
+        filename: external_exports.string().optional().describe('Filename for the image when using fileData (default "photo.jpg").'),
         confirm: schemaConfirm
       }
     },
-    async ({ path, confirm }) => {
-      if (!confirm) return previewResult("uploadUserPhoto", { photo: path });
-      const data = await client.gqlUpload(
+    async ({ path, fileData, filename, confirm }) => {
+      if (!path && !fileData) {
+        throw new McpToolError("Provide an image: a local file `path` or inline base64 `fileData`.", {
+          hint: "On the local server pass `path`; on the hosted connector pass `fileData` (base64)."
+        });
+      }
+      if (!confirm) return previewResult("uploadUserPhoto", { photo: path ?? "(inline bytes)" });
+      const file2 = await resolveUpload({ path, data: fileData, filename: filename ?? "photo.jpg" });
+      const data = await client2.gqlUpload(
         UPLOAD_USER_PHOTO,
         { photo: null },
-        { "variables.photo": path }
+        { "variables.photo": file2 }
       );
       return textResult(data.uploadUserPhoto);
     }
@@ -32868,7 +32948,7 @@ async function captureViboSession(deps = {}) {
 }
 
 // src/tools/session.ts
-function registerSessionTools(server) {
+function registerSessionTools(server, client2) {
   server.registerTool(
     "vibo_capture_session",
     {
@@ -32877,8 +32957,8 @@ function registerSessionTools(server) {
     },
     async () => {
       const { accessToken, refreshToken } = await captureViboSession();
-      client.setTokens(accessToken, refreshToken);
-      const data = await client.gql(GET_ME);
+      client2.setTokens(accessToken, refreshToken);
+      const data = await client2.gql(GET_ME);
       saveSession({ accessToken, refreshToken });
       return textResult({
         captured: true,
@@ -32895,6 +32975,10 @@ await runMcp({
   name: "vibo-mcp",
   version: VERSION,
   banner: "[vibo-mcp] This project was developed and is maintained by AI (Claude Code). Use at your own discretion.",
+  // runMcp invokes each registrar as `register(server, deps)`, threading this
+  // singleton so the tool modules import only the ViboClient TYPE. Same client
+  // as before — just passed in rather than imported by each module.
+  deps: client,
   tools: [
     registerProfileTools,
     registerEventTools,