@clipform/mcp-server 2.3.0 → 2.5.0

package/README.md

@@ -65,9 +65,11 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 |------|-------------|
 | `clipform_create_form` | Create a new Clipform (interactive video-style form). |
 | `clipform_list_forms` | List forms in your workspace with optional filtering. |
-| `clipform_get_form` | Retrieve a form's details including all nodes in sequential order. |
+| `clipform_whoami` | Show the current identity: auth mode (api key, session, or anonymous), active workspace, and plan limits. |
+| `clipform_get_form` | Retrieve a form's details including all nodes in sequential order and their routing. |
 | `clipform_update_form` | Update a form's title, publish status, settings, or tags. |
 | `clipform_delete_form` | Move a form and all its nodes to the trash. |
+| `clipform_get_results` | View response counts, choice/action answer breakdowns, and recent open-text answers for a form. |
 | `clipform_add_node` | Add a new node to an existing form. |
 | `clipform_update_node` | Update one or more existing nodes' text, type, config, or options. |
 | `clipform_delete_node` | Delete a node from a form. |
@@ -76,10 +78,9 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 | `clipform_attach_node_media` | Attach an existing workspace media asset (from clipform_upload_media_asset) to one or more nodes (max 10). |
 | `clipform_get_node_media` | Get the media attached to a node, including processing status. |
 | `clipform_delete_node_media` | Remove media from a node. |
-| `clipform_set_logic` | Set routing logic on one or more nodes. |
-| `clipform_log_generation` | Save an audit trail for a generated form. |
+| `clipform_set_logic` | Set the next node for one or more nodes, wiring a linear route (A to B to C). |
+| `clipform_log_generation` | Internal audit step run by a form-generation workflow. |
 | `clipform_search_news` | Fallback news lookup for clients without native web search. |
-| `clipform_youtube_transcript` | Extract the transcript, title, and channel info from a YouTube video. |
 | `clipform_generate_tts` | Generate narration audio from text with word-level captions. |
 | `clipform_generate_video` | Generate a video from images, video clips, or both, synced to an audio track. |
 | `clipform_search_media` | Search images or stock video clips. |

package/dist/auth-context.d.ts

@@ -14,9 +14,33 @@ interface McpAuthContext {
     scopes: string[];
     tool_name?: string;
     api_key?: string;
+    is_anonymous?: boolean;
+    mcp_mint_proof?: string;
 }
+/**
+ * Marker header the in-process MCP tool layer sets on its outgoing API
+ * requests (api-client.ts) when `is_anonymous` is true, so an anonymous
+ * app-chat session can't launder itself into an unrestricted API-key caller
+ * by asking the bot to publish/mint credentials on its behalf. apps/api's
+ * authMiddleware / workspaceAccessMiddleware / requireWorkspaceWriteAuth
+ * read this on the API-key path and set isAnonymous accordingly - trusting
+ * it is safe because it can only RESTRICT a caller: a real integration that
+ * sets this header on its own API-key requests only denies itself, it can
+ * never use it to gain anonymous-JWT privileges it doesn't already have.
+ */
+declare const MCP_ANONYMOUS_HEADER = "x-clipform-anonymous";
+/**
+ * Carries `mcp_mint_proof` on the same outgoing bot-key request. Unlike
+ * MCP_ANONYMOUS_HEADER (a boolean that can only ever RESTRICT), this header's
+ * VALUE matters - it names an identity a claim token gets bound to - so its
+ * value is HMAC-signed (mcp-mint-proof.ts) rather than trusted raw: a direct
+ * external caller reaching `POST /v1/forms` with any valid workspace API key
+ * could otherwise hand-set an unsigned "mint uid" header to an arbitrary
+ * victim's uid themselves (#3330 review).
+ */
+declare const MCP_MINT_PROOF_HEADER = "x-clipform-mcp-mint-proof";
 declare function runWithMcpAuth<T>(ctx: McpAuthContext, fn: () => Promise<T> | T): Promise<T> | T;
 declare function getMcpAuth(): McpAuthContext | undefined;
 declare function runWithMcpTool<T>(toolName: string, fn: () => Promise<T> | T): Promise<T> | T;
 
-export { type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };
+export { MCP_ANONYMOUS_HEADER, MCP_MINT_PROOF_HEADER, type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };

package/dist/auth-context.js

@@ -1,10 +1,14 @@
 import {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool
-} from "./chunk-V4L5RQWK.js";
+} from "./chunk-ENHVQDSI.js";
 import "./chunk-G3PMV62Z.js";
 export {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool

package/dist/{chunk-YZJZ5NPL.js → chunk-3BYQLPTT.js}

@@ -1,6 +1,8 @@
 import {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth
-} from "./chunk-V4L5RQWK.js";
+} from "./chunk-ENHVQDSI.js";
 import {
   isAuthFault,
   isServerFault,
@@ -95,6 +97,17 @@ var FEATURES = {
     status: "live",
     category: "builder"
   },
+  anonymous_builder: {
+    name: "Anonymous builder",
+    description: "Try the builder without an account via /try - an anonymous Supabase session, converted to a real account at publish time",
+    // Desktop v1 (#2979) shipped flag-dark: the entry route, publish wall, and
+    // conversion modal all land behind this flag. Enabled at launch rollout -
+    // the prod Supabase Anonymous Sign-Ins toggle must stay on for /try guest
+    // sessions to mint (dev first, then prod after #3016).
+    enabled: true,
+    status: "beta",
+    category: "builder"
+  },
   // -- Node types --
   node_start: {
     name: "Start node",
@@ -339,8 +352,30 @@ var FEATURES = {
   dynamic_link: {
     name: "Dynamic links",
     description: "A named link that points at a form, so the target can be swapped from the dashboard without changing the embed code or printed link",
+    enabled: true,
+    status: "live",
+    category: "sharing",
+    wentLiveAt: "2026-08-27"
+  },
+  custom_domains: {
+    name: "Custom domains",
+    description: "Serve your forms on your own subdomain (forms.yourbrand.com) with vanity paths, instead of a clipform.io link",
     enabled: false,
-    status: "beta",
+    status: "planned",
+    category: "sharing"
+  },
+  branded_qr: {
+    name: "Branded QR codes",
+    description: "Render a form's share QR in its theme color with the logo centered, instead of plain black",
+    enabled: false,
+    status: "planned",
+    category: "sharing"
+  },
+  email_share: {
+    name: "Add to an email",
+    description: "Copy-paste image + link snippet for pasting a Clipform into an email campaign",
+    enabled: false,
+    status: "planned",
     category: "sharing"
   },
   remove_branding: {
@@ -544,6 +579,9 @@ var DRAW_GAME_DEFAULT_TIERS = [
   { min_score: 75, label: "Great match" },
   { min_score: 92, label: "Perfect" }
 ];
+var DEFAULT_MAX_RECORDING_SECONDS = 120;
+var MAX_RECORDING_SECONDS_MIN = 10;
+var MAX_RECORDING_SECONDS_MAX = 300;
 var NODE_TYPES = {
   start: {
     label: "Start",
@@ -719,6 +757,14 @@ var NODE_TYPES = {
           type: "string",
           label: "Content media type",
           description: "How the node media was provided"
+        },
+        max_recording_seconds: {
+          type: "number",
+          default: DEFAULT_MAX_RECORDING_SECONDS,
+          minimum: MAX_RECORDING_SECONDS_MIN,
+          maximum: MAX_RECORDING_SECONDS_MAX,
+          label: "Max recording length (seconds)",
+          description: "Cap on the audio/video recorder for this node, in seconds"
         }
       }
     },
@@ -1029,6 +1075,22 @@ var NODE_TYPES = {
               value: { type: "string" }
             }
           }
+        },
+        // Consent/opt-in agreements the respondent was shown. Present only when
+        // the node has consent items. `accepted` is their choice; `label` is the
+        // exact wording they agreed to, snapshotted per response (#2828).
+        consent: {
+          type: "array",
+          items: {
+            type: "object",
+            required: ["name", "accepted", "type", "label"],
+            properties: {
+              name: { type: "string" },
+              accepted: { type: "boolean" },
+              type: { type: "string", enum: CONSENT_TYPES },
+              label: { type: "string" }
+            }
+          }
         }
       }
     }
@@ -1810,7 +1872,10 @@ var NODE_TYPES = {
     supports_media: false,
     is_system: false,
     show_in_results: false,
-    default_config: null,
+    default_config: {
+      title: "Thank you!",
+      message: "Your response has been submitted."
+    },
     config_schema: {
       type: "object",
       properties: {
@@ -2115,7 +2180,10 @@ var HELP_TOPICS = {
   liveAndDraft: { path: "/help/managing-forms", anchor: "live-and-draft" },
   publishingChanges: { path: "/help/managing-forms", anchor: "publishing-changes" },
   embedding: { path: "/help/embed", anchor: null },
-  publicResults: { path: "/help/public-results", anchor: null }
+  emailShare: { path: "/help/sharing", anchor: "share-by-email" },
+  publicResults: { path: "/help/public-results", anchor: null },
+  trash: { path: "/help/managing-forms", anchor: "trash" },
+  agreementVersions: { path: "/help/responses", anchor: "agreement-versions" }
 };
 function buildHelpLinks(docsBaseUrl) {
   const links = {};
@@ -2125,6 +2193,58 @@ function buildHelpLinks(docsBaseUrl) {
   return links;
 }
 
+// ../config/logic-types.js
+function isBranchingActive(node) {
+  if (!node) return true;
+  return node.type === "choice" || node.type === "binary" ? node.config?.choice?.enable_branching === true : true;
+}
+function isOptionEdge(action) {
+  return !!action?.condition?.vars?.some((v) => v.type === "option");
+}
+function isInactiveOptionEdge(node, action) {
+  return isOptionEdge(action) && !isBranchingActive(node);
+}
+
+// ../config/logic-chain.js
+function outgoingTargets(actions, node) {
+  const out = [];
+  for (const a of actions ?? []) {
+    if (node && isInactiveOptionEdge(node, a)) continue;
+    const v = a?.details?.to?.value;
+    if (v && !out.includes(v)) out.push(v);
+  }
+  return out;
+}
+function defaultTarget(actions) {
+  if (!actions || actions.length === 0) return null;
+  const nodeLevel = actions.find((a) => {
+    const vars = a.condition?.vars;
+    return !!vars && vars.length > 0 && vars.every((v) => v.type === "node");
+  });
+  return (nodeLevel ?? actions[0])?.details?.to ?? null;
+}
+function bfsOrder(nodes, logicByNode) {
+  const byId = new Map(nodes.map((n) => [n.id, n]));
+  const ordered = [];
+  const seen = /* @__PURE__ */ new Set();
+  const start = nodes.find((n) => n.type === "start");
+  if (start) {
+    const queue = [start.id];
+    while (queue.length) {
+      const id = queue.shift();
+      if (seen.has(id)) continue;
+      seen.add(id);
+      const node = byId.get(id);
+      if (node) ordered.push(node);
+      for (const target of outgoingTargets(logicByNode.get(id), node)) {
+        if (!seen.has(target) && byId.has(target)) queue.push(target);
+      }
+    }
+  }
+  for (const node of nodes) if (!seen.has(node.id)) ordered.push(node);
+  return ordered;
+}
+
 // ../config/index.js
 var isServer = typeof window === "undefined";
 var isBrowser = typeof window !== "undefined";
@@ -2206,6 +2326,168 @@ var MEDIA_DIRECT_MAX_BYTES = 20 * 1024 * 1024;
 var SUPABASE_STORAGE_MAX_BYTES = 50 * 1024 * 1024;
 var VIDEO_COMPRESS_FLOOR_BYTES = 1 * 1024 * 1024;
 var HELP_LINKS = buildHelpLinks(BUSINESS.urls.docs);
+var PLAN_LIMITS = {
+  free_v1: {
+    tier: 0,
+    name: "Free",
+    price: "$0",
+    period: "forever",
+    price_cents: 0,
+    stripe_price_id: { test: null, live: null },
+    // Shopify App Pricing plan NAME (must match the Partner Dashboard plan
+    // exactly - the app_subscriptions/update payload carries this name). Free
+    // generates no subscription, so this is only used by the drift check.
+    shopify_plan_handle: "Free",
+    node_limit: null,
+    form_limit: 5,
+    workspace_limit: 1,
+    show_branding: true,
+    custom_theme: false,
+    dynamic_links: false,
+    custom_domain: false,
+    response_limit: 100,
+    features: [
+      "Up to 5 forms",
+      "Unlimited questions per form",
+      // "completed" is not a tightening: response_limit has always been 100,
+      // but the counter now excludes partials (#2618), so this wording is both
+      // accurate and strictly more generous than what it replaced.
+      "100 completed responses per month",
+      "Full AI tooling (TTS, media, video)",
+      "Clipform branding"
+    ]
+  },
+  pro_v1: {
+    tier: 1,
+    name: "Pro",
+    price: "$25",
+    period: "/month",
+    price_cents: 2500,
+    stripe_price_id: { test: "price_1TZnmhCWdEPD0KoNWWJTc3B6", live: "price_1TZnrZEJOD9ik3LhhFwGZ6ut" },
+    // Must match the Partner Dashboard plan name exactly (drives webhook plan
+    // mapping + the price drift check). Keep in step with price_cents above.
+    shopify_plan_handle: "Pro",
+    node_limit: null,
+    form_limit: null,
+    workspace_limit: null,
+    show_branding: false,
+    custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
+    response_limit: null,
+    features: [
+      "Unlimited forms",
+      "Unlimited questions",
+      "Unlimited responses",
+      "Custom themes & colors",
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
+    ]
+  },
+  // Banded Pro (#1937). pro_v2_1k IS the current tier-1 version (#2671) - new
+  // Pro signups land here; pro_v1 is retained only to grandfather the accounts
+  // that predate the flip.
+  //
+  // Billing is one subscription with TWO Stripe items: this licensed base
+  // billed in advance, plus a volume-tiered metered top-up (STRIPE_BAND_PRICE_ID
+  // below) billed in arrears - so the band a workspace lands in is decided by
+  // usage, never by swapping plan version. Completed responses report to the
+  // Stripe usage meter (#2651, apps/api/src/lib/usage-metering.ts) via
+  // planMetersUsage below, and checkout appends the metered item whenever a band
+  // price is configured for the mode (#2652). The band price now exists in BOTH
+  // test and live (STRIPE_BAND_PRICE_ID), so a new Pro checkout is two-item and
+  // usage above the base band IS charged once this deploys - the HUMAN LEGAL
+  // REVIEW on LEGAL.billing below must clear before that go-live.
+  //
+  // `response_limit` counts COMPLETED response sets only; partials never
+  // consume allowance.
+  //
+  // shopify_plan_handle is null until the matching Partner Dashboard plans
+  // exist - so planVersionForShopifyPlan still maps Shopify's "Pro" to pro_v1
+  // ($25 unlimited) while web signups get this band. Creating those plans is
+  // what closes that cross-channel gap.
+  pro_v2_1k: {
+    tier: 1,
+    name: "Pro",
+    price: "$24",
+    period: "/month",
+    price_cents: 2400,
+    stripe_price_id: {
+      test: "price_1U0lA6EJOD9ik3Lhube5eBcK",
+      live: "price_1U115SEJOD9ik3LhOU9OkqJk"
+    },
+    shopify_plan_handle: null,
+    node_limit: null,
+    form_limit: null,
+    workspace_limit: null,
+    show_branding: false,
+    custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
+    response_limit: 1e3,
+    features: [
+      "Unlimited forms",
+      "Unlimited questions",
+      "1,000 completed responses per month",
+      "Custom themes & colors",
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
+    ]
+  },
+  pro_v2_5k: {
+    tier: 1,
+    name: "Pro",
+    price: "$49",
+    period: "/month",
+    price_cents: 4900,
+    stripe_price_id: { test: null, live: null },
+    shopify_plan_handle: null,
+    node_limit: null,
+    form_limit: null,
+    workspace_limit: null,
+    show_branding: false,
+    custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
+    response_limit: 5e3,
+    features: [
+      "Unlimited forms",
+      "Unlimited questions",
+      "5,000 completed responses per month",
+      "Custom themes & colors",
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
+    ]
+  },
+  pro_v2_20k: {
+    tier: 1,
+    name: "Pro",
+    price: "$99",
+    period: "/month",
+    price_cents: 9900,
+    stripe_price_id: { test: null, live: null },
+    shopify_plan_handle: null,
+    node_limit: null,
+    form_limit: null,
+    workspace_limit: null,
+    show_branding: false,
+    custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
+    response_limit: 2e4,
+    features: [
+      "Unlimited forms",
+      "Unlimited questions",
+      "20,000 completed responses per month",
+      "Custom themes & colors",
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
+    ]
+  }
+};
+var PRO_BANDS = ["pro_v2_1k", "pro_v2_5k", "pro_v2_20k"].map(
+  (version) => ({ version, ...PLAN_LIMITS[version] })
+);
 var CONTACT_FIELDS = [
   { id: "first_name", label: "First Name", type: "text", placeholder: "Enter first name", order: 1 },
   { id: "last_name", label: "Last Name", type: "text", placeholder: "Enter last name", order: 2 },
@@ -2287,6 +2569,42 @@ function exposedCompositionIds(includeNonPublic) {
 }
 var SCENE_LAYER_COMPOSITION_IDS = COMPOSITION_REGISTRY.filter((c) => c.scene_layer).map((c) => c.id);
 var MCP_TOOL_TIERS = {};
+var MCP_TOOL_TOOLSETS = {
+  // account: workspace/account-scoped read + admin tools.
+  clipform_list_forms: "account",
+  clipform_get_form: "account",
+  clipform_delete_form: "account",
+  clipform_whoami: "account",
+  clipform_get_results: "account",
+  // forms: form/node structure + research tools used while building.
+  clipform_create_form: "forms",
+  clipform_add_node: "forms",
+  clipform_update_node: "forms",
+  clipform_delete_node: "forms",
+  clipform_update_form: "forms",
+  clipform_set_logic: "forms",
+  clipform_get_guide: "forms",
+  clipform_get_workflow: "forms",
+  clipform_search_news: "forms",
+  clipform_fetch_boundary: "forms",
+  clipform_log_generation: "forms",
+  // media: creative/render/asset tools.
+  clipform_generate_tts: "media",
+  clipform_generate_video: "media",
+  clipform_render_composition: "media",
+  clipform_render_video_template: "media",
+  clipform_check_render: "media",
+  clipform_upload_media_asset: "media",
+  clipform_complete_media_upload: "media",
+  clipform_attach_node_media: "media",
+  clipform_get_node_media: "media",
+  clipform_delete_node_media: "media",
+  clipform_search_media: "media",
+  clipform_search_music: "media",
+  clipform_list_compositions: "media",
+  clipform_list_assets: "media",
+  clipform_list_video_templates: "media"
+};
 
 // src/lib/api-client.ts
 function getApiBaseUrl() {
@@ -2314,7 +2632,14 @@ function getAuthHeaders() {
     });
     throw new Error(message);
   }
-  return { "Authorization": `Bearer ${apiKey}` };
+  const headers = { "Authorization": `Bearer ${apiKey}` };
+  if (authCtx?.is_anonymous) {
+    headers[MCP_ANONYMOUS_HEADER] = "1";
+  }
+  if (authCtx?.mcp_mint_proof) {
+    headers[MCP_MINT_PROOF_HEADER] = authCtx.mcp_mint_proof;
+  }
+  return headers;
 }
 async function callApi(path, options = {}) {
   const { body, params, timeoutMs = 3e4 } = options;
@@ -2352,9 +2677,7 @@ async function callApi(path, options = {}) {
     return {
       ok: false,
       status: 0,
-      error: `Failed to connect to API at ${url}.
-
-Error: ${message}`
+      error: "Unable to reach the Clipform API right now. Please try again in a moment."
     };
   }
   if (response.status === 204) {
@@ -2434,13 +2757,11 @@ async function getSessionContextWithAuth() {
     lines.push(
       apiAuthMode === "api_key" ? "Auth: API key (workspace-scoped)" : "Auth: signed in (connected to a Clipform account)"
     );
-    lines.push(`Workspace: ${me.workspace?.name ?? "Unknown"} (${me.workspace?.id ?? "?"})`);
-    if (me.user_id) lines.push(`User: ${me.user_id}`);
-    if (me.company_id) lines.push(`Company: ${me.company_id}`);
+    lines.push(`Workspace: ${me.workspace?.name ?? "Unknown"}`);
   } else {
     lines.push("Auth: anonymous (not connected to a Clipform account)");
     if (me.workspace) {
-      lines.push(`Workspace: ${me.workspace.name} (${me.workspace.id})`);
+      lines.push(`Workspace: ${me.workspace.name}`);
     }
   }
   lines.push(`Plan: ${plan.name} (tier ${plan.tier})`);
@@ -2459,7 +2780,7 @@ async function getSessionContextWithAuth() {
   }
   if (authMode === "anonymous") {
     lines.push(`
-To unlock your full plan: sign in to your Clipform account.`);
+Anonymous session: forms are not tied to a Clipform account until you sign in.`);
   }
   return { text: lines.join("\n"), authMode };
 }
@@ -2479,7 +2800,8 @@ export {
   ALL_VARIANTS,
   resolveFormType,
   getDiscoveryParams,
-  BUSINESS,
+  defaultTarget,
+  bfsOrder,
   CONTACT_FIELDS,
   KEN_BURNS_EFFECTS,
   KEN_BURNS_PRESETS,
@@ -2487,6 +2809,7 @@ export {
   SLIDESHOW_TRANSITIONS,
   exposedCompositionIds,
   MCP_TOOL_TIERS,
+  MCP_TOOL_TOOLSETS,
   callApi,
   errorResult,
   textResult,
@@ -2494,4 +2817,4 @@ export {
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-YZJZ5NPL.js.map
+//# sourceMappingURL=chunk-3BYQLPTT.js.map