@clipform/mcp-server 2.4.0 → 2.5.0

package/README.md

@@ -65,9 +65,11 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 |------|-------------|
 | `clipform_create_form` | Create a new Clipform (interactive video-style form). |
 | `clipform_list_forms` | List forms in your workspace with optional filtering. |
-| `clipform_get_form` | Retrieve a form's details including all nodes in sequential order. |
+| `clipform_whoami` | Show the current identity: auth mode (api key, session, or anonymous), active workspace, and plan limits. |
+| `clipform_get_form` | Retrieve a form's details including all nodes in sequential order and their routing. |
 | `clipform_update_form` | Update a form's title, publish status, settings, or tags. |
 | `clipform_delete_form` | Move a form and all its nodes to the trash. |
+| `clipform_get_results` | View response counts, choice/action answer breakdowns, and recent open-text answers for a form. |
 | `clipform_add_node` | Add a new node to an existing form. |
 | `clipform_update_node` | Update one or more existing nodes' text, type, config, or options. |
 | `clipform_delete_node` | Delete a node from a form. |
@@ -76,10 +78,9 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 | `clipform_attach_node_media` | Attach an existing workspace media asset (from clipform_upload_media_asset) to one or more nodes (max 10). |
 | `clipform_get_node_media` | Get the media attached to a node, including processing status. |
 | `clipform_delete_node_media` | Remove media from a node. |
-| `clipform_set_logic` | Set routing logic on one or more nodes. |
-| `clipform_log_generation` | Save an audit trail for a generated form. |
+| `clipform_set_logic` | Set the next node for one or more nodes, wiring a linear route (A to B to C). |
+| `clipform_log_generation` | Internal audit step run by a form-generation workflow. |
 | `clipform_search_news` | Fallback news lookup for clients without native web search. |
-| `clipform_youtube_transcript` | Extract the transcript, title, and channel info from a YouTube video. |
 | `clipform_generate_tts` | Generate narration audio from text with word-level captions. |
 | `clipform_generate_video` | Generate a video from images, video clips, or both, synced to an audio track. |
 | `clipform_search_media` | Search images or stock video clips. |

package/dist/auth-context.d.ts

@@ -14,9 +14,33 @@ interface McpAuthContext {
     scopes: string[];
     tool_name?: string;
     api_key?: string;
+    is_anonymous?: boolean;
+    mcp_mint_proof?: string;
 }
+/**
+ * Marker header the in-process MCP tool layer sets on its outgoing API
+ * requests (api-client.ts) when `is_anonymous` is true, so an anonymous
+ * app-chat session can't launder itself into an unrestricted API-key caller
+ * by asking the bot to publish/mint credentials on its behalf. apps/api's
+ * authMiddleware / workspaceAccessMiddleware / requireWorkspaceWriteAuth
+ * read this on the API-key path and set isAnonymous accordingly - trusting
+ * it is safe because it can only RESTRICT a caller: a real integration that
+ * sets this header on its own API-key requests only denies itself, it can
+ * never use it to gain anonymous-JWT privileges it doesn't already have.
+ */
+declare const MCP_ANONYMOUS_HEADER = "x-clipform-anonymous";
+/**
+ * Carries `mcp_mint_proof` on the same outgoing bot-key request. Unlike
+ * MCP_ANONYMOUS_HEADER (a boolean that can only ever RESTRICT), this header's
+ * VALUE matters - it names an identity a claim token gets bound to - so its
+ * value is HMAC-signed (mcp-mint-proof.ts) rather than trusted raw: a direct
+ * external caller reaching `POST /v1/forms` with any valid workspace API key
+ * could otherwise hand-set an unsigned "mint uid" header to an arbitrary
+ * victim's uid themselves (#3330 review).
+ */
+declare const MCP_MINT_PROOF_HEADER = "x-clipform-mcp-mint-proof";
 declare function runWithMcpAuth<T>(ctx: McpAuthContext, fn: () => Promise<T> | T): Promise<T> | T;
 declare function getMcpAuth(): McpAuthContext | undefined;
 declare function runWithMcpTool<T>(toolName: string, fn: () => Promise<T> | T): Promise<T> | T;
 
-export { type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };
+export { MCP_ANONYMOUS_HEADER, MCP_MINT_PROOF_HEADER, type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };

package/dist/auth-context.js

@@ -1,10 +1,14 @@
 import {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool
-} from "./chunk-V4L5RQWK.js";
+} from "./chunk-ENHVQDSI.js";
 import "./chunk-G3PMV62Z.js";
 export {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool

package/dist/{chunk-5LV55T7F.js → chunk-3BYQLPTT.js}

@@ -1,6 +1,8 @@
 import {
+  MCP_ANONYMOUS_HEADER,
+  MCP_MINT_PROOF_HEADER,
   getMcpAuth
-} from "./chunk-V4L5RQWK.js";
+} from "./chunk-ENHVQDSI.js";
 import {
   isAuthFault,
   isServerFault,
@@ -95,6 +97,17 @@ var FEATURES = {
     status: "live",
     category: "builder"
   },
+  anonymous_builder: {
+    name: "Anonymous builder",
+    description: "Try the builder without an account via /try - an anonymous Supabase session, converted to a real account at publish time",
+    // Desktop v1 (#2979) shipped flag-dark: the entry route, publish wall, and
+    // conversion modal all land behind this flag. Enabled at launch rollout -
+    // the prod Supabase Anonymous Sign-Ins toggle must stay on for /try guest
+    // sessions to mint (dev first, then prod after #3016).
+    enabled: true,
+    status: "beta",
+    category: "builder"
+  },
   // -- Node types --
   node_start: {
     name: "Start node",
@@ -339,8 +352,30 @@ var FEATURES = {
   dynamic_link: {
     name: "Dynamic links",
     description: "A named link that points at a form, so the target can be swapped from the dashboard without changing the embed code or printed link",
+    enabled: true,
+    status: "live",
+    category: "sharing",
+    wentLiveAt: "2026-08-27"
+  },
+  custom_domains: {
+    name: "Custom domains",
+    description: "Serve your forms on your own subdomain (forms.yourbrand.com) with vanity paths, instead of a clipform.io link",
     enabled: false,
-    status: "beta",
+    status: "planned",
+    category: "sharing"
+  },
+  branded_qr: {
+    name: "Branded QR codes",
+    description: "Render a form's share QR in its theme color with the logo centered, instead of plain black",
+    enabled: false,
+    status: "planned",
+    category: "sharing"
+  },
+  email_share: {
+    name: "Add to an email",
+    description: "Copy-paste image + link snippet for pasting a Clipform into an email campaign",
+    enabled: false,
+    status: "planned",
     category: "sharing"
   },
   remove_branding: {
@@ -2145,8 +2180,10 @@ var HELP_TOPICS = {
   liveAndDraft: { path: "/help/managing-forms", anchor: "live-and-draft" },
   publishingChanges: { path: "/help/managing-forms", anchor: "publishing-changes" },
   embedding: { path: "/help/embed", anchor: null },
+  emailShare: { path: "/help/sharing", anchor: "share-by-email" },
   publicResults: { path: "/help/public-results", anchor: null },
-  trash: { path: "/help/managing-forms", anchor: "trash" }
+  trash: { path: "/help/managing-forms", anchor: "trash" },
+  agreementVersions: { path: "/help/responses", anchor: "agreement-versions" }
 };
 function buildHelpLinks(docsBaseUrl) {
   const links = {};
@@ -2156,6 +2193,58 @@ function buildHelpLinks(docsBaseUrl) {
   return links;
 }
 
+// ../config/logic-types.js
+function isBranchingActive(node) {
+  if (!node) return true;
+  return node.type === "choice" || node.type === "binary" ? node.config?.choice?.enable_branching === true : true;
+}
+function isOptionEdge(action) {
+  return !!action?.condition?.vars?.some((v) => v.type === "option");
+}
+function isInactiveOptionEdge(node, action) {
+  return isOptionEdge(action) && !isBranchingActive(node);
+}
+
+// ../config/logic-chain.js
+function outgoingTargets(actions, node) {
+  const out = [];
+  for (const a of actions ?? []) {
+    if (node && isInactiveOptionEdge(node, a)) continue;
+    const v = a?.details?.to?.value;
+    if (v && !out.includes(v)) out.push(v);
+  }
+  return out;
+}
+function defaultTarget(actions) {
+  if (!actions || actions.length === 0) return null;
+  const nodeLevel = actions.find((a) => {
+    const vars = a.condition?.vars;
+    return !!vars && vars.length > 0 && vars.every((v) => v.type === "node");
+  });
+  return (nodeLevel ?? actions[0])?.details?.to ?? null;
+}
+function bfsOrder(nodes, logicByNode) {
+  const byId = new Map(nodes.map((n) => [n.id, n]));
+  const ordered = [];
+  const seen = /* @__PURE__ */ new Set();
+  const start = nodes.find((n) => n.type === "start");
+  if (start) {
+    const queue = [start.id];
+    while (queue.length) {
+      const id = queue.shift();
+      if (seen.has(id)) continue;
+      seen.add(id);
+      const node = byId.get(id);
+      if (node) ordered.push(node);
+      for (const target of outgoingTargets(logicByNode.get(id), node)) {
+        if (!seen.has(target) && byId.has(target)) queue.push(target);
+      }
+    }
+  }
+  for (const node of nodes) if (!seen.has(node.id)) ordered.push(node);
+  return ordered;
+}
+
 // ../config/index.js
 var isServer = typeof window === "undefined";
 var isBrowser = typeof window !== "undefined";
@@ -2254,6 +2343,8 @@ var PLAN_LIMITS = {
     workspace_limit: 1,
     show_branding: true,
     custom_theme: false,
+    dynamic_links: false,
+    custom_domain: false,
     response_limit: 100,
     features: [
       "Up to 5 forms",
@@ -2281,13 +2372,16 @@ var PLAN_LIMITS = {
     workspace_limit: null,
     show_branding: false,
     custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
     response_limit: null,
     features: [
       "Unlimited forms",
       "Unlimited questions",
       "Unlimited responses",
       "Custom themes & colors",
-      "Remove Clipform branding"
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
     ]
   },
   // Banded Pro (#1937). pro_v2_1k IS the current tier-1 version (#2671) - new
@@ -2328,13 +2422,16 @@ var PLAN_LIMITS = {
     workspace_limit: null,
     show_branding: false,
     custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
     response_limit: 1e3,
     features: [
       "Unlimited forms",
       "Unlimited questions",
       "1,000 completed responses per month",
       "Custom themes & colors",
-      "Remove Clipform branding"
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
     ]
   },
   pro_v2_5k: {
@@ -2350,13 +2447,16 @@ var PLAN_LIMITS = {
     workspace_limit: null,
     show_branding: false,
     custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
     response_limit: 5e3,
     features: [
       "Unlimited forms",
       "Unlimited questions",
       "5,000 completed responses per month",
       "Custom themes & colors",
-      "Remove Clipform branding"
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
     ]
   },
   pro_v2_20k: {
@@ -2372,13 +2472,16 @@ var PLAN_LIMITS = {
     workspace_limit: null,
     show_branding: false,
     custom_theme: true,
+    dynamic_links: true,
+    custom_domain: true,
     response_limit: 2e4,
     features: [
       "Unlimited forms",
       "Unlimited questions",
       "20,000 completed responses per month",
       "Custom themes & colors",
-      "Remove Clipform branding"
+      "Remove Clipform branding",
+      "Dynamic links - repoint a printed URL to a new form"
     ]
   }
 };
@@ -2466,6 +2569,42 @@ function exposedCompositionIds(includeNonPublic) {
 }
 var SCENE_LAYER_COMPOSITION_IDS = COMPOSITION_REGISTRY.filter((c) => c.scene_layer).map((c) => c.id);
 var MCP_TOOL_TIERS = {};
+var MCP_TOOL_TOOLSETS = {
+  // account: workspace/account-scoped read + admin tools.
+  clipform_list_forms: "account",
+  clipform_get_form: "account",
+  clipform_delete_form: "account",
+  clipform_whoami: "account",
+  clipform_get_results: "account",
+  // forms: form/node structure + research tools used while building.
+  clipform_create_form: "forms",
+  clipform_add_node: "forms",
+  clipform_update_node: "forms",
+  clipform_delete_node: "forms",
+  clipform_update_form: "forms",
+  clipform_set_logic: "forms",
+  clipform_get_guide: "forms",
+  clipform_get_workflow: "forms",
+  clipform_search_news: "forms",
+  clipform_fetch_boundary: "forms",
+  clipform_log_generation: "forms",
+  // media: creative/render/asset tools.
+  clipform_generate_tts: "media",
+  clipform_generate_video: "media",
+  clipform_render_composition: "media",
+  clipform_render_video_template: "media",
+  clipform_check_render: "media",
+  clipform_upload_media_asset: "media",
+  clipform_complete_media_upload: "media",
+  clipform_attach_node_media: "media",
+  clipform_get_node_media: "media",
+  clipform_delete_node_media: "media",
+  clipform_search_media: "media",
+  clipform_search_music: "media",
+  clipform_list_compositions: "media",
+  clipform_list_assets: "media",
+  clipform_list_video_templates: "media"
+};
 
 // src/lib/api-client.ts
 function getApiBaseUrl() {
@@ -2493,7 +2632,14 @@ function getAuthHeaders() {
     });
     throw new Error(message);
   }
-  return { "Authorization": `Bearer ${apiKey}` };
+  const headers = { "Authorization": `Bearer ${apiKey}` };
+  if (authCtx?.is_anonymous) {
+    headers[MCP_ANONYMOUS_HEADER] = "1";
+  }
+  if (authCtx?.mcp_mint_proof) {
+    headers[MCP_MINT_PROOF_HEADER] = authCtx.mcp_mint_proof;
+  }
+  return headers;
 }
 async function callApi(path, options = {}) {
   const { body, params, timeoutMs = 3e4 } = options;
@@ -2531,9 +2677,7 @@ async function callApi(path, options = {}) {
     return {
       ok: false,
       status: 0,
-      error: `Failed to connect to API at ${url}.
-
-Error: ${message}`
+      error: "Unable to reach the Clipform API right now. Please try again in a moment."
     };
   }
   if (response.status === 204) {
@@ -2613,13 +2757,11 @@ async function getSessionContextWithAuth() {
     lines.push(
       apiAuthMode === "api_key" ? "Auth: API key (workspace-scoped)" : "Auth: signed in (connected to a Clipform account)"
     );
-    lines.push(`Workspace: ${me.workspace?.name ?? "Unknown"} (${me.workspace?.id ?? "?"})`);
-    if (me.user_id) lines.push(`User: ${me.user_id}`);
-    if (me.company_id) lines.push(`Company: ${me.company_id}`);
+    lines.push(`Workspace: ${me.workspace?.name ?? "Unknown"}`);
   } else {
     lines.push("Auth: anonymous (not connected to a Clipform account)");
     if (me.workspace) {
-      lines.push(`Workspace: ${me.workspace.name} (${me.workspace.id})`);
+      lines.push(`Workspace: ${me.workspace.name}`);
     }
   }
   lines.push(`Plan: ${plan.name} (tier ${plan.tier})`);
@@ -2638,7 +2780,7 @@ async function getSessionContextWithAuth() {
   }
   if (authMode === "anonymous") {
     lines.push(`
-To unlock your full plan: sign in to your Clipform account.`);
+Anonymous session: forms are not tied to a Clipform account until you sign in.`);
   }
   return { text: lines.join("\n"), authMode };
 }
@@ -2658,7 +2800,8 @@ export {
   ALL_VARIANTS,
   resolveFormType,
   getDiscoveryParams,
-  BUSINESS,
+  defaultTarget,
+  bfsOrder,
   CONTACT_FIELDS,
   KEN_BURNS_EFFECTS,
   KEN_BURNS_PRESETS,
@@ -2666,6 +2809,7 @@ export {
   SLIDESHOW_TRANSITIONS,
   exposedCompositionIds,
   MCP_TOOL_TIERS,
+  MCP_TOOL_TOOLSETS,
   callApi,
   errorResult,
   textResult,
@@ -2673,4 +2817,4 @@ export {
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-5LV55T7F.js.map
+//# sourceMappingURL=chunk-3BYQLPTT.js.map