@avallon-labs/mcp 60.1.0 → 60.2.0-staging.1326

package/dist/index.js

@@ -56,5 +56,5 @@ function describeErrors(body) {
 
 // src/index.ts
 setupFetch();
-await import("./server-FHO2NMID.js");
+await import("./server-7E6U7EWA.js");
 //# sourceMappingURL=index.js.map

package/dist/{server-FHO2NMID.js → server-7E6U7EWA.js}

@@ -2625,6 +2625,90 @@ var listChatMessages = async (chatId, params, options) => {
   const data = body ? JSON.parse(body) : {};
   return { data, status: res.status, headers: res.headers };
 };
+var getGetPublicFormSubmissionUrl = (id) => {
+  return `/public/v1/form-submissions/${id}`;
+};
+var getPublicFormSubmission = async (id, options) => {
+  const res = await fetch(
+    getGetPublicFormSubmissionUrl(id),
+    {
+      ...options,
+      method: "GET"
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
+var getSubmitFormSubmissionUrl = (id) => {
+  return `/public/v1/form-submissions/${id}`;
+};
+var submitFormSubmission = async (id, submitFormSubmissionBody, options) => {
+  const getHeaders = (h) => {
+    if (!h) return {};
+    if (h instanceof Headers) return Object.fromEntries(h.entries());
+    if (Array.isArray(h)) return Object.fromEntries(h);
+    return h;
+  };
+  const res = await fetch(
+    getSubmitFormSubmissionUrl(id),
+    {
+      ...options,
+      method: "PUT",
+      headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+      body: JSON.stringify(submitFormSubmissionBody)
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
+var getCreateFormUrl = () => {
+  return `/v1/forms`;
+};
+var createForm = async (createFormBody, options) => {
+  const getHeaders = (h) => {
+    if (!h) return {};
+    if (h instanceof Headers) return Object.fromEntries(h.entries());
+    if (Array.isArray(h)) return Object.fromEntries(h);
+    return h;
+  };
+  const res = await fetch(
+    getCreateFormUrl(),
+    {
+      ...options,
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+      body: JSON.stringify(createFormBody)
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
+var getCreateFormSubmissionUrl = () => {
+  return `/v1/form-submissions`;
+};
+var createFormSubmission = async (createFormSubmissionBody, options) => {
+  const getHeaders = (h) => {
+    if (!h) return {};
+    if (h instanceof Headers) return Object.fromEntries(h.entries());
+    if (Array.isArray(h)) return Object.fromEntries(h);
+    return h;
+  };
+  const res = await fetch(
+    getCreateFormSubmissionUrl(),
+    {
+      ...options,
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+      body: JSON.stringify(createFormSubmissionBody)
+    }
+  );
+  const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+  const data = body ? JSON.parse(body) : {};
+  return { data, status: res.status, headers: res.headers };
+};
 var getGetExtractUrl = (id) => {
   return `/v1/extracts/${id}`;
 };
@@ -6904,6 +6988,98 @@ var listChatMessagesHandler = async (args, options) => {
     structuredContent: res.data
   };
 };
+var getPublicFormSubmissionHandler = async (args, options) => {
+  const res = await getPublicFormSubmission(args.pathParams.id, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
+var submitFormSubmissionHandler = async (args, options) => {
+  const res = await submitFormSubmission(args.pathParams.id, args.bodyParams, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
+var createFormHandler = async (args, options) => {
+  const res = await createForm(args.bodyParams, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
+var createFormSubmissionHandler = async (args, options) => {
+  const res = await createFormSubmission(args.bodyParams, options);
+  if (res.status >= 400) {
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(res.data ?? null)
+        }
+      ],
+      isError: true
+    };
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(res.data ?? null)
+      }
+    ],
+    structuredContent: res.data
+  };
+};
 var getExtractHandler = async (args, options) => {
   const res = await getExtract(args.pathParams.id, options);
   if (res.status >= 400) {
@@ -11178,7 +11354,7 @@ var CreateWorkerResponse = zod.object({
     "schema": zod.record(zod.string(), zod.unknown()),
     "tool_ids": zod.array(zod.string()),
     "secret_ids": zod.array(zod.string()).describe("Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."),
-    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
+    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
     "model": zod.string(),
     "fast_mode": zod.boolean()
   }),
@@ -11255,7 +11431,7 @@ var GetWorkerResponse = zod.object({
     "schema": zod.record(zod.string(), zod.unknown()),
     "tool_ids": zod.array(zod.string()),
     "secret_ids": zod.array(zod.string()).describe("Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."),
-    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
+    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
     "model": zod.string(),
     "fast_mode": zod.boolean()
   }),
@@ -11282,7 +11458,7 @@ var UpdateWorkerBody = zod.object({
   "schema": zod.record(zod.string(), zod.unknown()).optional(),
   "tools": zod.array(zod.string().uuid()).optional().describe("Replace the worker's attached tool set. Omit to leave unchanged; pass [] to clear."),
   "secrets": zod.array(zod.string().uuid()).optional().describe("Replace the worker's attached secret set. Omit to leave unchanged; pass [] to detach all."),
-  "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])).optional().describe("Permissions granted to the worker on each run")
+  "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])).optional().describe("Permissions granted to the worker on each run")
 });
 var updateWorkerResponseDataVersionMin = 0;
 var updateWorkerResponseDataVersionsLatestMin = -9007199254740991;
@@ -11310,7 +11486,7 @@ var UpdateWorkerResponse = zod.object({
     "schema": zod.record(zod.string(), zod.unknown()),
     "tool_ids": zod.array(zod.string()),
     "secret_ids": zod.array(zod.string()).describe("Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."),
-    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
+    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
     "model": zod.string(),
     "fast_mode": zod.boolean()
   }),
@@ -11383,37 +11559,37 @@ var UpdateWorkerMcpsResponse = zod.object({
     "schema": zod.record(zod.string(), zod.unknown()),
     "tool_ids": zod.array(zod.string()),
     "secret_ids": zod.array(zod.string()).describe("Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."),
-    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
+    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])).describe("Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."),
     "model": zod.string(),
     "fast_mode": zod.boolean()
   }),
   "message": zod.string()
 });
 var GetAccessParams = zod.object({
-  "entityType": zod.enum(["worker", "case_type"]),
-  "entityId": zod.string().describe("The worker's id or the case type's slug.")
+  "entityType": zod.enum(["worker", "case_type", "form"]),
+  "entityId": zod.string().describe("The worker's or form's id, or the case type's slug.")
 });
 var GetAccessResponse = zod.object({
   "data": zod.object({
     "grants": zod.array(zod.object({
       "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
       "principal_id": zod.string().uuid(),
-      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it."),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it. On a `form`, `viewer` can see it and open form submissions; `editor` can also edit and share it."),
       "created_at": zod.string().datetime({ "offset": true })
     }))
   }),
   "message": zod.string()
 });
 var UpdateAccessParams = zod.object({
-  "entityType": zod.enum(["worker", "case_type"]),
-  "entityId": zod.string().describe("The worker's id or the case type's slug.")
+  "entityType": zod.enum(["worker", "case_type", "form"]),
+  "entityId": zod.string().describe("The worker's or form's id, or the case type's slug.")
 });
 var updateAccessBodyGrantsMax = 1e3;
 var UpdateAccessBody = zod.object({
   "grants": zod.array(zod.object({
     "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
     "principal_id": zod.string().uuid(),
-    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it.")
+    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it. On a `form`, `viewer` can see it and open form submissions; `editor` can also edit and share it.")
   })).max(updateAccessBodyGrantsMax).describe("Everyone the entity is shared with, replacing the current set. Pass an empty array to share it with no one.")
 });
 var UpdateAccessResponse = zod.object({
@@ -11421,15 +11597,15 @@ var UpdateAccessResponse = zod.object({
     "grants": zod.array(zod.object({
       "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
       "principal_id": zod.string().uuid(),
-      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it."),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it. On a `form`, `viewer` can see it and open form submissions; `editor` can also edit and share it."),
       "created_at": zod.string().datetime({ "offset": true })
     }))
   }),
   "message": zod.string()
 });
 var ChangeAccessParams = zod.object({
-  "entityType": zod.enum(["worker", "case_type"]),
-  "entityId": zod.string().describe("The worker's id or the case type's slug.")
+  "entityType": zod.enum(["worker", "case_type", "form"]),
+  "entityId": zod.string().describe("The worker's or form's id, or the case type's slug.")
 });
 var changeAccessBodyGrantsDefault = [];
 var changeAccessBodyGrantsMax = 1e3;
@@ -11439,7 +11615,7 @@ var ChangeAccessBody = zod.object({
   "grants": zod.array(zod.object({
     "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
     "principal_id": zod.string().uuid(),
-    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it.")
+    "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it. On a `form`, `viewer` can see it and open form submissions; `editor` can also edit and share it.")
   })).max(changeAccessBodyGrantsMax).default(changeAccessBodyGrantsDefault).describe("Grants to create, or whose level to change."),
   "revocations": zod.array(zod.object({
     "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
@@ -11451,19 +11627,19 @@ var ChangeAccessResponse = zod.object({
     "grants": zod.array(zod.object({
       "principal_type": zod.enum(["profile", "worker", "tenant"]).describe("Who holds the grant: a team member's `profile`, a `worker`, whose runs act with it, or the whole `tenant`. `tenant` is not supported yet."),
       "principal_id": zod.string().uuid(),
-      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it."),
+      "level": zod.enum(["viewer", "editor"]).describe("`viewer` can see and use the entity. `editor` can also change and share it. On a `worker`, `viewer` sees the worker, its prompt and everything it owns, and can start it; `editor` can also edit, promote, delete and share it. Attaching secrets and managing schedules still need the matching role permission. On a `case_type`, `editor` can also edit, promote and share it. On a `form`, `viewer` can see it and open form submissions; `editor` can also edit and share it."),
       "created_at": zod.string().datetime({ "offset": true })
     }))
   }),
   "message": zod.string()
 });
 var GetMyAccessParams = zod.object({
-  "entityType": zod.enum(["worker", "case_type"]),
-  "entityId": zod.string().describe("The worker's id or the case type's slug.")
+  "entityType": zod.enum(["worker", "case_type", "form"]),
+  "entityId": zod.string().describe("The worker's or form's id, or the case type's slug.")
 });
 var GetMyAccessResponse = zod.object({
   "data": zod.object({
-    "permissions": zod.array(zod.enum(["workers:read", "workers:run", "workers:write", "workers:promote", "case-types:read", "case-types:write"])).describe("What the caller may do with the entity, through their role or a grant on it. `workers:write` on a worker and `case-types:write` on a case type also let the caller share it.")
+    "permissions": zod.array(zod.enum(["workers:read", "workers:run", "workers:write", "workers:promote", "case-types:read", "case-types:write", "forms:read", "forms:request", "forms:write"])).describe("What the caller may do with the entity, through their role or a grant on it. `workers:write` on a worker and `case-types:write` on a case type also let the caller share it.")
   }),
   "message": zod.string()
 });
@@ -11516,7 +11692,7 @@ var GetWorkerVersionResponse = zod.object({
       "name": zod.enum(["ventiv", "klear", "klear-browser", "demo-browser", "demo-claims", "filehandler-browser"]).describe("MCP server identifier.")
     })),
     "schema": zod.record(zod.string(), zod.unknown()),
-    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write"])),
+    "permissions": zod.array(zod.enum(["workers:run", "inboxes:send", "artifacts:write", "outbound-jobs:schedule", "cases:write", "schedules:write", "information-requests:write", "forms:request"])),
     "model": zod.string(),
     "fast_mode": zod.boolean(),
     "tool_ids": zod.array(zod.string()),
@@ -12105,6 +12281,66 @@ var ListChatMessagesResponse = zod.object({
     "total": zod.number()
   })
 });
+var GetPublicFormSubmissionParams = zod.object({
+  "id": zod.string().uuid()
+});
+var GetPublicFormSubmissionResponse = zod.object({
+  "data": zod.object({
+    "title": zod.string(),
+    "schema": zod.record(zod.string(), zod.unknown()).describe("JSON Schema of the form version this submission is pinned to. Property order is the display order.")
+  }),
+  "message": zod.string()
+});
+var SubmitFormSubmissionParams = zod.object({
+  "id": zod.string().uuid()
+});
+var SubmitFormSubmissionBody = zod.object({
+  "answers": zod.record(zod.string(), zod.union([zod.string(), zod.number(), zod.boolean()])).describe("Answers keyed by form field. Validated against the JSON Schema of the form version this submission is pinned to; failures return 400 with the field path in the message.")
+});
+var SubmitFormSubmissionResponse = zod.object({
+  "data": zod.object({
+    "id": zod.string().uuid()
+  }),
+  "message": zod.string()
+});
+var CreateFormBody = zod.object({
+  "title": zod.string().min(1),
+  "schema": zod.record(zod.string(), zod.unknown()).describe("JSON Schema (draft 2020-12) of the form's fields, restricted to the renderer subset: a flat object of boolean, string and number fields with `title`, `additionalProperties: false`, optional `if`/`then`/`else`, `allOf`, `dependentRequired` and `$data` bounds. Property order is the display order."),
+  "processor_type": zod.enum(["extractor", "worker"]),
+  "processor_id": zod.string().uuid().describe("Id of the worker that processes each submission.")
+});
+var CreateFormResponse = zod.object({
+  "data": zod.object({
+    "id": zod.string(),
+    "title": zod.string(),
+    "version": zod.number().describe("Version the schema below belongs to."),
+    "versions": zod.object({
+      "live": zod.number(),
+      "test": zod.number()
+    }),
+    "schema": zod.record(zod.string(), zod.unknown()).describe("JSON Schema (draft 2020-12) of the form's fields, restricted to the renderer subset: a flat object of boolean, string and number fields with `title`, `additionalProperties: false`, optional `if`/`then`/`else`, `allOf`, `dependentRequired` and `$data` bounds. Property order is the display order."),
+    "processor_type": zod.enum(["extractor", "worker"]),
+    "processor_id": zod.string(),
+    "created_at": zod.string().datetime({ "offset": true }),
+    "updated_at": zod.string().datetime({ "offset": true })
+  }),
+  "message": zod.string()
+});
+var CreateFormSubmissionBody = zod.object({
+  "form_id": zod.string().uuid(),
+  "environment": zod.enum(["live", "test"])
+});
+var CreateFormSubmissionResponse = zod.object({
+  "data": zod.object({
+    "id": zod.string().describe("Unguessable id that is the link: the renderer opens `/public/v1/form-submissions/{id}`."),
+    "form_id": zod.string().uuid(),
+    "form_version": zod.number(),
+    "environment": zod.enum(["live", "test"]),
+    "created_at": zod.string().datetime({ "offset": true }),
+    "submitted_at": zod.union([zod.string().datetime({ "offset": true }), zod.null()])
+  }),
+  "message": zod.string()
+});
 var GetExtractParams = zod.object({
   "id": zod.string().uuid()
 });
@@ -12192,7 +12428,7 @@ var GetProfileResponse = zod.object({
     "last_name": zod.union([zod.string(), zod.null()]),
     "email": zod.string(),
     "role": zod.enum(["admin", "avallon_admin", "member"]),
-    "permissions": zod.array(zod.enum(["voice-agents:write", "voice-agents:promote", "tools:write", "tools:execute", "tools:promote", "tool-calls:read", "extractors:write", "inboxes:write", "inboxes:send", "artifacts:write", "api-keys:write", "teams:write", "cases:write", "cases:delete", "case-types:read", "case-types:create", "case-types:write", "information-requests:write", "information-requests:resolve", "information-requests:delete", "feedback:write", "outbound-jobs:write", "outbound-jobs:schedule", "calls:monitor", "workers:read", "workers:create", "workers:write", "workers:execute", "workers:write-mcp", "workers:run", "workers:promote", "chat-agents:write", "notifications:write", "prompts:read", "prompts:write", "secrets:read", "secrets:write", "schedules:read", "schedules:write", "tenants:write", "analytics:view-cost"])),
+    "permissions": zod.array(zod.enum(["voice-agents:write", "voice-agents:promote", "tools:write", "tools:execute", "tools:promote", "tool-calls:read", "extractors:write", "inboxes:write", "inboxes:send", "artifacts:write", "api-keys:write", "teams:write", "cases:write", "cases:delete", "case-types:read", "case-types:create", "case-types:write", "forms:read", "forms:create", "forms:write", "forms:request", "information-requests:write", "information-requests:resolve", "information-requests:delete", "feedback:write", "outbound-jobs:write", "outbound-jobs:schedule", "calls:monitor", "workers:read", "workers:create", "workers:write", "workers:execute", "workers:write-mcp", "workers:run", "workers:promote", "chat-agents:write", "notifications:write", "prompts:read", "prompts:write", "secrets:read", "secrets:write", "schedules:read", "schedules:write", "tenants:write", "analytics:view-cost"])),
     "tenants": zod.object({
       "active": zod.object({
         "id": zod.string(),
@@ -12734,7 +12970,7 @@ var listDispatchesQueryOffsetMin = 0;
 var listDispatchesQuerySortByDefault = `due_at`;
 var listDispatchesQuerySortOrderDefault = `desc`;
 var ListDispatchesQueryParams = zod.object({
-  "trigger_type": zod.enum(["schedule", "email", "information_request", "manual", "call"]).optional().describe("Only dispatches produced by this kind of trigger"),
+  "trigger_type": zod.enum(["schedule", "email", "information_request", "manual", "call", "form_submission"]).optional().describe("Only dispatches produced by this kind of trigger"),
   "trigger_id": zod.string().uuid().optional().describe("Only dispatches produced by this trigger. Requires `trigger_type`."),
   "count": zod.number().min(1).max(listDispatchesQueryCountMax).default(listDispatchesQueryCountDefault),
   "offset": zod.number().min(listDispatchesQueryOffsetMin).default(listDispatchesQueryOffsetDefault),
@@ -12747,7 +12983,7 @@ var ListDispatchesResponse = zod.object({
   "data": zod.array(zod.object({
     "id": zod.string(),
     "trigger": zod.object({
-      "type": zod.enum(["schedule", "email", "information_request", "manual", "call"]),
+      "type": zod.enum(["schedule", "email", "information_request", "manual", "call", "form_submission"]),
       "id": zod.string()
     }),
     "target": zod.union([zod.object({
@@ -13701,7 +13937,7 @@ var GetToolCallResponse = zod.object({
     "dispatch": zod.union([zod.object({
       "id": zod.string(),
       "trigger": zod.object({
-        "type": zod.enum(["schedule", "email", "information_request", "manual", "call"]),
+        "type": zod.enum(["schedule", "email", "information_request", "manual", "call", "form_submission"]),
         "id": zod.string()
       }),
       "target": zod.union([zod.object({
@@ -16280,6 +16516,71 @@ var createMcpServer = (options) => {
       signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
     })
   );
+  tools.getPublicFormSubmission = server2.registerTool(
+    "getPublicFormSubmission",
+    {
+      title: "Get a form submission's form (public)",
+      description: "Return the title and JSON Schema of the form version a submission link is pinned to, for the form renderer. The id is the link and the only credential; an unknown id is 404. Once the request has been submitted the request fails with 409 and `{ title }`.",
+      inputSchema: {
+        pathParams: GetPublicFormSubmissionParams
+      },
+      outputSchema: GetPublicFormSubmissionResponse,
+      annotations: { readOnlyHint: true }
+    },
+    (args, ctx) => getPublicFormSubmissionHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
+  tools.submitFormSubmission = server2.registerTool(
+    "submitFormSubmission",
+    {
+      title: "Submit a form submission (public)",
+      description: "Store the answers for a submission link and hand them to the form's processor. Each link can be submitted once: a second submit fails with 409. The id is the link and the only credential; an unknown id is 404.",
+      inputSchema: {
+        pathParams: SubmitFormSubmissionParams,
+        bodyParams: SubmitFormSubmissionBody.optional()
+      },
+      outputSchema: SubmitFormSubmissionResponse,
+      annotations: { destructiveHint: true, idempotentHint: true }
+    },
+    (args, ctx) => submitFormSubmissionHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
+  tools.createForm = server2.registerTool(
+    "createForm",
+    {
+      title: "Create form",
+      description: "Create a form. Its schema becomes version 1, used by both live and test. The schema is validated against the renderer subset; violations are reported as 400 with the offending field path.",
+      inputSchema: {
+        bodyParams: CreateFormBody.optional()
+      },
+      outputSchema: CreateFormResponse,
+      annotations: { destructiveHint: true }
+    },
+    (args, ctx) => createFormHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
+  tools.createFormSubmission = server2.registerTool(
+    "createFormSubmission",
+    {
+      title: "Create form submission",
+      description: "Open a submission link for a form, pinned to the version the given environment points at. Share the returned id with the person filling the form.",
+      inputSchema: {
+        bodyParams: CreateFormSubmissionBody.optional()
+      },
+      outputSchema: CreateFormSubmissionResponse,
+      annotations: { destructiveHint: true }
+    },
+    (args, ctx) => createFormSubmissionHandler(args, {
+      ...options,
+      signal: options?.signal ? AbortSignal.any([options.signal, ctx.signal]) : ctx.signal
+    })
+  );
   tools.getExtract = server2.registerTool(
     "getExtract",
     {
@@ -17429,4 +17730,4 @@ var transport = new StdioServerTransport();
 server.connect(transport).then(() => {
   console.error("MCP server running on stdio");
 }).catch(console.error);
-//# sourceMappingURL=server-FHO2NMID.js.map
+//# sourceMappingURL=server-7E6U7EWA.js.map