vibo-mcp 2.3.0 → 2.4.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
-    "version": "2.3.0"
+    "version": "2.4.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Vibo",
       "source": "./",
       "description": "MCP server for Vibo — browse & manage events, timeline, songs, the DJ song ideas/questions, guests, and exports to Spotify/Apple Music",
-      "version": "2.3.0",
+      "version": "2.4.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "vibo-mcp",
   "displayName": "Vibo",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -33,11 +33,31 @@ Choose one method:
 |--------|----------|------|
 | Email + password (recommended) | `VIBO_EMAIL`, `VIBO_PASSWORD` | You sign in to Vibo with an email/password. |
 | Captured token | `VIBO_ACCESS_TOKEN` (+ `VIBO_REFRESH_TOKEN`) | Your account uses Apple/Google/Facebook sign-in (no password). Capture `x-token`/`x-refresh-token` from a signed-in `web.vibodj.com` session. |
-| Browser capture (SSO) | run `vibo_capture_session` | With the fetchproxy browser extension installed and signed into `web.vibodj.com`, capture the token automatically (saved to `~/.vibo-mcp/session.json`). |
+| Browser capture (SSO) | run `vibo_capture_session` | With the [ContextMint Bridge](#contextmint-bridge-for-sso-capture) browser extension installed and signed into `web.vibodj.com`, capture the token automatically (saved to `~/.vibo-mcp/session.json`). |
 
 The server boots without credentials; the config error only surfaces on the
 first tool call.
 
+### ContextMint Bridge (for SSO capture)
+
+`vibo_capture_session` reads your signed-in tab through the ContextMint Bridge
+browser extension. Install it from
+[github.com/nullnet-app/contextmint-bridge/releases](https://github.com/nullnet-app/contextmint-bridge/releases):
+
+- **Chrome:** download the Chrome zip, unzip it, and load it unpacked at
+  `chrome://extensions` (Developer mode → Load unpacked).
+- **Safari:** not available yet — it will ship inside the ContextMint app,
+  which has no public download. Use Chrome for now.
+
+Approve the pair code the extension shows on first use.
+
+ContextMint Bridge is the fetchproxy browser extension under its new name, from
+the same maintainer — fetchproxy's own README
+(https://github.com/chrischall/fetchproxy#extension) points to it. Its source is
+public at https://github.com/nullnet-app/contextmint-bridge: build it yourself,
+or check a release zip against the `.sha256` file published beside it
+(`shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256`).
+
 ### Uploads
 
 `vibo_set_profile_photo` and photo/file answers to `vibo_answer_question` only
@@ -46,6 +66,35 @@ read local files from the upload directory — `VIBO_UPLOAD_DIR`, default
 Hidden files, symlinks that lead outside the directory, and files over 25 MiB
 are refused, and photo slots need an image file.
 
+### Timeline sections and limits
+
+- `vibo_create_section` adds a section and can place it (`afterSectionId` or a
+  0-based `position`). The web app only appends new sections to the end.
+  Visibility is `host` (default, "Me and DJ") or `public` (guests too).
+- `vibo_delete_section` previews the section's name, its song count and its
+  answered questions before deleting. It refuses the DJ's do-not-play list
+  (`dontPlay`) and timeline dividers (`headline`) unless you pass `force: true`.
+- `vibo_reorder_sections` moves one or more sections to directly after another
+  section, or to the start. `vibo_reorder_songs` does the same for songs within
+  a section.
+
+Vibo's limits, checked before anything is sent:
+
+| What | Limit |
+|---|---|
+| Section name | 45 characters (the web app's limit) |
+| Song comment (`vibo_update_song`) | 90 characters (an emoji counts as 2) |
+
+A host can only do some things when the DJ's settings allow it: adding or
+reordering sections (event settings), or reordering one section's songs (that
+section's "hosts can order songs"). Vibo turns "hosts can order songs" **off**
+for every section a host creates, and only the DJ can turn it on. When a
+setting blocks you, the tool says which one instead of returning Vibo's bare
+"Action is not allowed for user".
+
+Vibo doesn't store a section description set by a host, so
+`vibo_create_section` takes a note (for the DJ) instead.
+
 ### Confirmations
 
 Every write (adding or removing songs, comments, invites, exports, answers,

package/dist/auth.js

@@ -21,7 +21,7 @@ const SERVER_NAME = 'vibo-mcp';
 /**
  * Capture the signed-in user's Vibo token pair from their browser via the
  * fetchproxy bridge and return it (the caller persists after verifying).
- * Preconditions: the fetchproxy browser
+ * Preconditions: the ContextMint Bridge browser
  * extension is installed and the user is signed into https://web.vibodj.com.
  */
 export async function captureViboSession(deps = {}) {
@@ -52,8 +52,12 @@ export async function captureViboSession(deps = {}) {
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
+        // @fetchproxy errors that know their own remedy (FetchproxyHintedError —
+        // e.g. capability_unavailable: this browser can't do that) carry a `hint`;
+        // keep it rather than telling the user to (re)install the extension.
+        const bridgeHint = err?.hint;
         throw new McpToolError(`Vibo browser token capture failed: ${msg}`, {
-            hint: 'Install the fetchproxy browser extension, sign into https://web.vibodj.com, approve the pair code, then retry.',
+            hint: typeof bridgeHint === 'string' && bridgeHint ? bridgeHint : 'Install the ContextMint Bridge browser extension (https://github.com/nullnet-app/contextmint-bridge/releases), sign into https://web.vibodj.com, approve the pair code, then retry.',
             cause: err,
         });
     }
@@ -61,7 +65,7 @@ export async function captureViboSession(deps = {}) {
     const refreshToken = session.localStorage?.['x-refresh-token'] ?? null;
     if (!accessToken) {
         throw new McpToolError('No Vibo token found in the signed-in browser tab.', {
-            hint: 'Make sure you are signed into https://web.vibodj.com in the browser with the fetchproxy extension, then retry.',
+            hint: 'Make sure you are signed into https://web.vibodj.com in the browser with ContextMint Bridge, then retry.',
         });
     }
     // Return the captured pair WITHOUT persisting — the caller verifies it