@clipform/mcp-server 3.0.0 → 3.3.0

package/dist/{chunk-QBPE32AV.js → chunk-4XCXDH3I.js}

@@ -6,7 +6,7 @@ import {
   getWorkflowText,
   objectType,
   registerPrompts
-} from "./chunk-KCF7ZVDI.js";
+} from "./chunk-22BV4NSB.js";
 import {
   GUIDE_TYPES,
   QUIZ_VARIANTS,
@@ -15,31 +15,36 @@ import {
   getGuideUri,
   guideFallbackText,
   registerResources
-} from "./chunk-EXV5M7YV.js";
+} from "./chunk-ELK26KWM.js";
 import {
   ACTIVE_NODE_TYPES,
   CONTACT_FIELDS,
   FEATURE_FLAGS,
   FORM_TYPE_ALIASES,
   FULL_CAPS,
+  MCP_ANON_PUBLISH_GATE,
+  MCP_TOOL_SECURITY,
   MCP_TOOL_TIERS,
   MCP_TOOL_TOOLSETS,
   NODE_TYPES,
   NON_COUNTABLE_TYPES,
+  authChallengeMeta,
   bfsOrder,
   callApi,
   capsFromToolsets,
   defaultTarget,
   errorResult,
   exposedCompositionIds,
+  isAnonymousAccountRequired,
   resolveFormType,
   structuredResult,
   textResult
-} from "./chunk-KNOCYZHG.js";
+} from "./chunk-SEZ37YSH.js";
 import {
   getMcpAuth,
+  runWithMcpAuth,
   runWithMcpTool
-} from "./chunk-HZMMOSEM.js";
+} from "./chunk-A5CFGL27.js";
 import {
   __commonJS,
   __export,
@@ -114,7 +119,7 @@ var require_code = __commonJS({
     }
     exports._ = _;
     var plus = new _Code("+");
-    function str(strs, ...args) {
+    function str2(strs, ...args) {
       const expr = [safeStringify(strs[0])];
       let i = 0;
       while (i < args.length) {
@@ -125,7 +130,7 @@ var require_code = __commonJS({
       optimize(expr);
       return new _Code(expr);
     }
-    exports.str = str;
+    exports.str = str2;
     function addCodeArg(code, arg) {
       if (arg instanceof _Code)
         code.push(...arg._items);
@@ -168,7 +173,7 @@ var require_code = __commonJS({
       return;
     }
     function strConcat(c1, c2) {
-      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str`${c1}${c2}`;
+      return c2.emptyStr() ? c1 : c1.emptyStr() ? c2 : str2`${c1}${c2}`;
     }
     exports.strConcat = strConcat;
     function interpolate(x) {
@@ -1130,22 +1135,22 @@ var require_util = __commonJS({
       return (0, codegen_1._)`${topSchemaRef}${schemaPath}${(0, codegen_1.getProperty)(keyword)}`;
     }
     exports.schemaRefOrVal = schemaRefOrVal;
-    function unescapeFragment(str) {
-      return unescapeJsonPointer(decodeURIComponent(str));
+    function unescapeFragment(str2) {
+      return unescapeJsonPointer(decodeURIComponent(str2));
     }
     exports.unescapeFragment = unescapeFragment;
-    function escapeFragment(str) {
-      return encodeURIComponent(escapeJsonPointer(str));
+    function escapeFragment(str2) {
+      return encodeURIComponent(escapeJsonPointer(str2));
     }
     exports.escapeFragment = escapeFragment;
-    function escapeJsonPointer(str) {
-      if (typeof str == "number")
-        return `${str}`;
-      return str.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPointer(str2) {
+      if (typeof str2 == "number")
+        return `${str2}`;
+      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
     }
     exports.escapeJsonPointer = escapeJsonPointer;
-    function unescapeJsonPointer(str) {
-      return str.replace(/~1/g, "/").replace(/~0/g, "~");
+    function unescapeJsonPointer(str2) {
+      return str2.replace(/~1/g, "/").replace(/~0/g, "~");
     }
     exports.unescapeJsonPointer = unescapeJsonPointer;
     function eachItem(xs, f) {
@@ -2170,8 +2175,8 @@ var require_json_schema_traverse = __commonJS({
         post(schema, jsonPtr, rootSchema, parentJsonPtr, parentKeyword, parentSchema, keyIndex);
       }
     }
-    function escapeJsonPtr(str) {
-      return str.replace(/~/g, "~0").replace(/\//g, "~1");
+    function escapeJsonPtr(str2) {
+      return str2.replace(/~/g, "~0").replace(/\//g, "~1");
     }
   }
 });
@@ -3235,10 +3240,10 @@ var require_utils = __commonJS({
         return { host, isIPV6: false };
       }
     }
-    function findToken(str, token) {
+    function findToken(str2, token) {
       let ind = 0;
-      for (let i = 0; i < str.length; i++) {
-        if (str[i] === token) ind++;
+      for (let i = 0; i < str2.length; i++) {
+        if (str2[i] === token) ind++;
       }
       return ind;
     }
@@ -3975,7 +3980,7 @@ var require_core = __commonJS({
     var util_1 = require_util();
     var $dataRefSchema = require_data();
     var uri_1 = require_uri();
-    var defaultRegExp = (str, flags) => new RegExp(str, flags);
+    var defaultRegExp = (str2, flags) => new RegExp(str2, flags);
     defaultRegExp.code = "new RegExp";
     var META_IGNORE_OPTIONS = ["removeAdditional", "useDefaults", "coerceTypes"];
     var EXT_SCOPE_NAMES = /* @__PURE__ */ new Set([
@@ -4770,16 +4775,16 @@ var require_ucs2length = __commonJS({
   "../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/runtime/ucs2length.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    function ucs2length(str) {
-      const len = str.length;
+    function ucs2length(str2) {
+      const len = str2.length;
       let length = 0;
       let pos = 0;
       let value;
       while (pos < len) {
         length++;
-        value = str.charCodeAt(pos++);
+        value = str2.charCodeAt(pos++);
         if (value >= 55296 && value <= 56319 && pos < len) {
-          value = str.charCodeAt(pos);
+          value = str2.charCodeAt(pos);
           if ((value & 64512) === 56320)
             pos++;
         }
@@ -6662,8 +6667,8 @@ var require_formats = __commonJS({
     }
     var DATE = /^(\d\d\d\d)-(\d\d)-(\d\d)$/;
     var DAYS = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
-    function date3(str) {
-      const matches = DATE.exec(str);
+    function date3(str2) {
+      const matches = DATE.exec(str2);
       if (!matches)
         return false;
       const year = +matches[1];
@@ -6682,8 +6687,8 @@ var require_formats = __commonJS({
     }
     var TIME = /^(\d\d):(\d\d):(\d\d(?:\.\d+)?)(z|([+-])(\d\d)(?::?(\d\d))?)?$/i;
     function getTime(strictTimeZone) {
-      return function time3(str) {
-        const matches = TIME.exec(str);
+      return function time3(str2) {
+        const matches = TIME.exec(str2);
         if (!matches)
           return false;
         const hr = +matches[1];
@@ -6729,8 +6734,8 @@ var require_formats = __commonJS({
     var DATE_TIME_SEPARATOR = /t|\s/i;
     function getDateTime(strictTimeZone) {
       const time3 = getTime(strictTimeZone);
-      return function date_time(str) {
-        const dateTime = str.split(DATE_TIME_SEPARATOR);
+      return function date_time(str2) {
+        const dateTime = str2.split(DATE_TIME_SEPARATOR);
         return dateTime.length === 2 && date3(dateTime[0]) && time3(dateTime[1]);
       };
     }
@@ -6755,13 +6760,13 @@ var require_formats = __commonJS({
     }
     var NOT_URI_FRAGMENT = /\/|:/;
     var URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
-    function uri(str) {
-      return NOT_URI_FRAGMENT.test(str) && URI.test(str);
+    function uri(str2) {
+      return NOT_URI_FRAGMENT.test(str2) && URI.test(str2);
     }
     var BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
-    function byte(str) {
+    function byte(str2) {
       BYTE.lastIndex = 0;
-      return BYTE.test(str);
+      return BYTE.test(str2);
     }
     var MIN_INT32 = -(2 ** 31);
     var MAX_INT32 = 2 ** 31 - 1;
@@ -6775,11 +6780,11 @@ var require_formats = __commonJS({
       return true;
     }
     var Z_ANCHOR = /[^\\]\\Z/;
-    function regex(str) {
-      if (Z_ANCHOR.test(str))
+    function regex(str2) {
+      if (Z_ANCHOR.test(str2))
         return false;
       try {
-        new RegExp(str);
+        new RegExp(str2);
         return true;
       } catch (e) {
         return false;
@@ -7115,14 +7120,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str = "";
+  let str2 = "";
   for (let i = 0; i < length; i++) {
-    str += chars[Math.floor(Math.random() * chars.length)];
+    str2 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str;
+  return str2;
 }
-function esc(str) {
-  return JSON.stringify(str);
+function esc(str2) {
+  return JSON.stringify(str2);
 }
 var captureStackTrace = Error.captureStackTrace ? Error.captureStackTrace : (..._args) => {
 };
@@ -7210,8 +7215,8 @@ var getParsedType = (data) => {
 };
 var propertyKeyTypes = /* @__PURE__ */ new Set(["string", "number", "symbol"]);
 var primitiveTypes = /* @__PURE__ */ new Set(["string", "number", "bigint", "boolean", "symbol", "undefined"]);
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str2) {
+  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -17187,6 +17192,48 @@ function applyNodeDefaults(node) {
   }
 }
 
+// src/lib/workspace-target.ts
+var PINNED_WORKSPACE_ERROR = "This connection is pinned to one workspace, so a workspace argument can't be used. Omit it to act in the connection's workspace.";
+async function runWithWorkspaceTarget(args, run) {
+  const input = args && typeof args === "object" ? args : {};
+  const workspaceId = typeof input.workspace_id === "string" && input.workspace_id ? input.workspace_id : void 0;
+  const formId = typeof input.form_id === "string" && input.form_id ? input.form_id : void 0;
+  if (!workspaceId && !formId) return run();
+  const ctx = getMcpAuth();
+  const resolve = ctx?.resolveWorkspace;
+  if (!resolve) {
+    if (workspaceId) return errorResult(PINNED_WORKSPACE_ERROR);
+    return run();
+  }
+  if (workspaceId && !formId && workspaceId === ctx.default_workspace_id) {
+    return run();
+  }
+  let resolved;
+  try {
+    resolved = await resolve({
+      ...workspaceId ? { workspace_id: workspaceId } : {},
+      ...formId ? { form_id: formId } : {}
+    });
+  } catch (err) {
+    return errorResult(err instanceof Error ? err.message : "Could not resolve that workspace.");
+  }
+  if (!resolved) return run();
+  return runWithMcpAuth(
+    {
+      ...ctx,
+      workspace_id: resolved.workspace_id,
+      api_key: resolved.api_key
+    },
+    run
+  );
+}
+var workspaceIdInput = external_exports.string().uuid().optional().describe(
+  "Workspace to act in (id from clipform_whoami workspaces). Omit to use the connection's default workspace."
+);
+var formIdTargetInput = external_exports.string().uuid().optional().describe(
+  "The form this is for (from clipform_create_form) - a routing hint only, to pick the right workspace. The result still lands in the workspace library, not on a node. Required on an anonymous session, or this lands in a different workspace and clipform_attach_node_media will not find it."
+);
+
 // src/tools/create-form.ts
 function registerCreateFormTool(server) {
   server.registerTool(
@@ -17211,6 +17258,7 @@ Example: A form that asks a question, collects contact info, then finishes:
   ]
 }`,
       inputSchema: {
+        workspace_id: workspaceIdInput,
         title: external_exports.string().describe("Form title"),
         nodes: external_exports.array(NodeSchema).min(1).describe("Ordered list of nodes/steps for the form"),
         show_step_counter: external_exports.boolean().optional().describe("Show step counter (e.g. '1/5'). Set true for quizzes."),
@@ -17229,7 +17277,8 @@ Example: A form that asks a question, collects contact info, then finishes:
         viewer_url: external_exports.string().describe("Form URL for respondents - a live public URL once authenticated/published, or a scoped preview-only link for an anonymous session"),
         dashboard_url: external_exports.string().optional().describe("Builder URL (sign in to edit)"),
         nodes: external_exports.array(external_exports.object({ id: external_exports.string(), type: external_exports.string(), prompt: external_exports.string() })).describe("Created nodes in order - IDs for attach_node_media / update_node"),
-        plan: external_exports.object({ name: external_exports.string(), auth_mode: external_exports.string() }).optional().describe("Plan and auth context for this session")
+        plan: external_exports.object({ name: external_exports.string(), auth_mode: external_exports.string() }).optional().describe("Plan and auth context for this session"),
+        workspace_name: external_exports.string().optional().describe("Name of the workspace the form was created in")
       },
       annotations: {
         readOnlyHint: false,
@@ -17318,7 +17367,8 @@ Example: A form that asks a question, collects contact info, then finishes:
         timeoutMs: 12e4
       });
       if (!createResult.ok) {
-        return errorResult(`Form NOT created (nothing was saved): ${createResult.error}`);
+        const message = `Form NOT created (nothing was saved): ${createResult.error}`;
+        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("invalid_token", message)) : errorResult(message);
       }
       const { data } = createResult;
       const formId = data.form_id;
@@ -17342,6 +17392,7 @@ Example: A form that asks a question, collects contact info, then finishes:
         isPreview ? `Form created as a preview draft.` : `Form created and live.`,
         ``,
         `Title: ${title}`,
+        ...planContext?.is_authenticated && planContext.workspace_name ? [`Workspace: ${planContext.workspace_name}`] : [],
         `Form ID: ${formId}`,
         ``,
         `Node IDs (use directly with attach_node_media / update_node - no get_form round-trip needed):`,
@@ -17389,15 +17440,111 @@ Example: A form that asks a question, collects contact info, then finishes:
           // runtime. structuredContent should return only relevant data (ChatGPT
           // App Directory response-hygiene policy, #797).
           nodes: createdNodes.map((n) => ({ id: n.id, type: n.type, prompt: n.prompt })),
-          ...planContext ? { plan: { name: planContext.plan_name, auth_mode: planContext.auth_mode } } : {}
+          ...planContext ? { plan: { name: planContext.plan_name, auth_mode: planContext.auth_mode } } : {},
+          ...planContext?.is_authenticated && planContext.workspace_name ? { workspace_name: planContext.workspace_name } : {}
         }
       };
     }
   );
 }
 
-// src/tools/import-form.ts
-function detectImportPlatform(url) {
+// ../form-sources/dist/types.js
+var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var str = (v) => typeof v === "string" ? v : "";
+var DEFAULT_QUESTION_CAP = 50;
+var MAX_OPTIONS = 10;
+
+// ../form-sources/dist/patterns.js
+var firstMatch = (url, patterns) => {
+  for (const re of patterns) {
+    const id = re.exec(url)?.[1];
+    if (id)
+      return id;
+  }
+  return null;
+};
+var VIDEOASK_PATTERNS = [
+  /^https?:\/\/api\.videoask\.com\/forms\/sharing\/(f[a-z0-9]{8})(?:[/?#]|$)/i,
+  /^https?:\/\/(?:www\.)?videoask\.com\/(f[a-z0-9]{8})(?:[/?#]|$)/i
+];
+var detectVideoAskId = (url) => firstMatch(url, VIDEOASK_PATTERNS);
+var TYPEFORM_ATTR_KINDS = {
+  "data-tf-widget": "inline",
+  "data-tf-popup": "popup",
+  "data-tf-slider": "slider",
+  "data-tf-sidetab": "slider",
+  "data-tf-popover": "popover"
+};
+var TALLY_ATTR_KINDS = {
+  "data-tally-src": "inline",
+  "data-tally-open": "popup"
+};
+var EMBED_ATTR_NAMES = [...Object.keys(TYPEFORM_ATTR_KINDS), ...Object.keys(TALLY_ATTR_KINDS)];
+function pushUnique(out, ref) {
+  if (!out.some((r) => r.id === ref.id))
+    out.push(ref);
+}
+function detectVideoAskScript(text) {
+  const out = [];
+  if (!/VIDEOASK_EMBED_CONFIG/.test(text))
+    return out;
+  for (const m of text.matchAll(/videoask\.com\/(f[a-z0-9]{8})(?![a-z0-9])/gi))
+    pushUnique(out, { id: m[1].toLowerCase() });
+  return out;
+}
+
+// ../form-sources/dist/providers/videoask.js
+function optionText(o) {
+  if (typeof o === "string")
+    return o;
+  if (isObj(o))
+    return str(o.label) || str(o.text) || str(o.value) || str(o.title);
+  return "";
+}
+var videoask = {
+  id: "videoask",
+  detect: detectVideoAskId,
+  detectScript: detectVideoAskScript,
+  fetchSpec: (id) => ({ url: `https://api.videoask.com/forms/sharing/${id}`, responseType: "json" }),
+  /**
+   * `GET api.videoask.com/forms/sharing/<id>`. Personal/account fields
+   * (`author_id`, `organization_id`, ...) are dropped by construction: only the
+   * fields below are copied.
+   */
+  summarize(id, json, opts) {
+    if (!isObj(json) || !Array.isArray(json.questions))
+      throw new Error("not a VideoAsk form payload");
+    const transcriptCap = opts?.transcriptCap;
+    const questions = json.questions.slice(0, opts?.questionCap ?? DEFAULT_QUESTION_CAP).map((q) => {
+      const o = isObj(q) ? q : {};
+      const transcript = str(o.transcription);
+      return {
+        label: str(o.label),
+        type: str(o.type),
+        options: (Array.isArray(o.options) ? o.options : []).map(optionText).filter(Boolean).slice(0, MAX_OPTIONS),
+        transcript: transcriptCap === void 0 ? transcript : transcript.slice(0, transcriptCap)
+      };
+    });
+    return {
+      provider: "videoask",
+      id,
+      title: str(json.title),
+      questions,
+      meta: {
+        ...str(json.created_at) ? { created_at: str(json.created_at) } : {},
+        ...str(json.updated_at) ? { last_edited_at: str(json.updated_at) } : {},
+        // hide_branding is a paid-plan feature.
+        paid_plan: json.hide_branding === true,
+        asks_contact: ["requires_contact_email", "requires_contact_info", "requires_contact_name", "requires_contact_phone_number"].some((k) => json[k] === true),
+        ...str(json.status) ? { status: str(json.status) } : {}
+      }
+    };
+  }
+};
+
+// ../form-sources/dist/index.js
+var IMPORTABLE_PROVIDERS = ["google", "typeform", "tally"];
+function detectProvider(url) {
   let parsed;
   try {
     parsed = new URL(url);
@@ -17405,17 +17552,22 @@ function detectImportPlatform(url) {
     return null;
   }
   const hostname2 = parsed.hostname.toLowerCase();
-  if (hostname2 === "docs.google.com" || hostname2 === "forms.gle") {
+  if (hostname2 === "docs.google.com" || hostname2 === "forms.gle")
     return "google";
-  }
-  if (hostname2.includes("typeform.com") && parsed.pathname.includes("/to/")) {
+  if (hostname2.includes("typeform.com") && parsed.pathname.includes("/to/"))
     return "typeform";
-  }
-  if (hostname2.includes("tally.so")) {
+  if (hostname2.includes("tally.so"))
     return "tally";
-  }
+  if (videoask.detect(url))
+    return "videoask";
   return null;
 }
+
+// src/tools/import-form.ts
+function detectImportPlatform(url) {
+  const provider = detectProvider(url);
+  return provider && IMPORTABLE_PROVIDERS.includes(provider) ? provider : null;
+}
 function pluralQuestions(n) {
   return `${n} question${n === 1 ? "" : "s"}`;
 }
@@ -17426,6 +17578,7 @@ function registerImportFormTool(server) {
       title: "Import Form",
       description: `Convert a public Google Form, Typeform, or Tally form into a new Clipform. Supported URLs: Google Forms (docs.google.com or forms.gle - must be shared as "Anyone with the link"), Typeform (form.typeform.com/to/...), and Tally (tally.so - must be public). The source form must be publicly accessible; a private form's questions cannot be read. The new Clipform is created as a DRAFT - review it, then republish with clipform_update_form (is_live: true) once it's ready. Some question types don't map cleanly to a Clipform node and are skipped rather than guessed at; the result always reports exactly what was imported vs skipped, and why.`,
       inputSchema: {
+        workspace_id: workspaceIdInput,
         url: external_exports.string().url().describe("Public URL of the Google Form, Typeform, or Tally form to import")
       },
       outputSchema: {
@@ -17438,7 +17591,8 @@ function registerImportFormTool(server) {
           skipped: external_exports.number().describe("Questions that could not be converted"),
           skipped_details: external_exports.array(external_exports.record(external_exports.string(), external_exports.string())).describe("Per-skipped-question title, reason, and source question type"),
           warnings: external_exports.array(external_exports.string()).describe("Non-fatal issues surfaced during the import")
-        })
+        }),
+        workspace_name: external_exports.string().optional().describe("Name of the workspace the form was created in")
       },
       annotations: {
         readOnlyHint: false,
@@ -17462,6 +17616,7 @@ function registerImportFormTool(server) {
       }
       const me = meResult.data;
       const workspaceId = me.workspace?.id ?? null;
+      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" ? me.workspace?.name ?? void 0 : void 0;
       if (!workspaceId) {
         return errorResult(
           "No workspace available. This usually means authentication is misconfigured - check your API key or OAuth connection."
@@ -17504,7 +17659,9 @@ function registerImportFormTool(server) {
           `Pass form_id (the UUID above, not a share_id) to follow-up tools (get_form, add_node, update_node, etc.).`
         );
       }
+      if (formId && workspaceName) lines.push(``, `Created in workspace '${workspaceName}'.`);
       return structuredResult(lines.join("\n"), {
+        ...workspaceName ? { workspace_name: workspaceName } : {},
         form_id: formId,
         viewer_url: viewerUrl,
         import_summary: {
@@ -17528,6 +17685,7 @@ function registerListFormsTool(server) {
       title: "List Clipforms",
       description: `List forms in your workspace with optional filtering. Returns paginated results (cursor-based). next_cursor is included when more results exist. To find or open a form by name, pass search with part of its title instead of paging through results.`,
       inputSchema: {
+        workspace_id: workspaceIdInput,
         limit: external_exports.number().int().min(1).max(100).optional().describe("Number of forms to return (default 25, max 100)"),
         cursor: external_exports.string().optional().describe(
           "Pagination cursor from previous response's next_cursor"
@@ -17811,6 +17969,11 @@ function registerGetFormTool(server) {
 }
 
 // src/tools/update-form.ts
+if (MCP_ANON_PUBLISH_GATE.tool !== "clipform_update_form") {
+  throw new Error(
+    `update-form.ts registers "clipform_update_form" but MCP_ANON_PUBLISH_GATE.tool is "${MCP_ANON_PUBLISH_GATE.tool}" - update both sides together (packages/config/index.js and this file's registerTool call) or the Claude lazy-auth HTTP gate silently stops matching this tool.`
+  );
+}
 function registerUpdateFormTool(server) {
   server.registerTool(
     "clipform_update_form",
@@ -17871,7 +18034,7 @@ function registerUpdateFormTool(server) {
           body
         });
         if (!result.ok) {
-          return errorResult(result.error);
+          return isAnonymousAccountRequired(result) ? errorResult(result.error, authChallengeMeta("invalid_token", result.error)) : errorResult(result.error);
         }
       }
       if (tags) {
@@ -17880,7 +18043,7 @@ function registerUpdateFormTool(server) {
           body: { tags }
         });
         if (!tagResult.ok) {
-          return errorResult(tagResult.error);
+          return isAnonymousAccountRequired(tagResult) ? errorResult(tagResult.error, authChallengeMeta("invalid_token", tagResult.error)) : errorResult(tagResult.error);
         }
       }
       const updates = [];
@@ -18347,7 +18510,8 @@ function registerWhoamiTool(server) {
           node_limit: external_exports.number().nullable().describe("Max nodes per form, or null if unlimited"),
           form_limit: external_exports.number().nullable().describe("Max forms in the workspace, or null if unlimited")
         }).describe("Plan limits for the active workspace"),
-        workspaces: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string() })).optional().describe("All workspaces in the caller's company - only present for session (dashboard) auth"),
+        workspaces: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string() })).optional().describe("Workspaces the caller can target with workspace_id - present for session (dashboard) auth and the OAuth connector"),
+        default_workspace_id: external_exports.string().optional().describe("OAuth connector only: the workspace used when a tool call omits workspace_id"),
         links: external_exports.object({
           dashboard: external_exports.string().describe("Dashboard home for the active workspace."),
           forms: external_exports.string().describe("Forms list for the active workspace.")
@@ -18385,11 +18549,26 @@ function registerWhoamiTool(server) {
       if (Array.isArray(me.workspaces)) {
         structured.workspaces = me.workspaces.map((w) => ({ id: w.id, name: w.name }));
       }
+      const ctx = getMcpAuth();
+      if (!structured.workspaces && ctx?.listWorkspaces) {
+        try {
+          const list = await ctx.listWorkspaces();
+          structured.workspaces = list.map((w) => ({ id: w.id, name: w.name }));
+          if (ctx.default_workspace_id) structured.default_workspace_id = ctx.default_workspace_id;
+        } catch {
+        }
+      }
       if (me.links && typeof me.links.dashboard === "string" && typeof me.links.forms === "string") {
         structured.links = { dashboard: me.links.dashboard, forms: me.links.forms };
       }
       const workspaceLine = workspace ? `workspace '${workspace.name}'` : "no workspace (anonymous)";
       const lines = [`Auth: ${authMode}. ${workspaceLine}. Plan: ${plan.name}.`];
+      if (Array.isArray(structured.workspaces) && ctx?.listWorkspaces) {
+        const list = structured.workspaces;
+        lines.push(
+          `Workspaces you can act in (pass one of these ids as the workspace argument to target it; omit it to use the default): ` + list.map((w) => `${w.name} (${w.id})`).join(", ")
+        );
+      }
       if (structured.links) {
         const links = structured.links;
         lines.push(`Dashboard: ${links.dashboard}`, `Forms list: ${links.forms}`);
@@ -18578,7 +18757,8 @@ function registerDeleteNodeTool(server) {
 
 // src/tools/upload-media-asset.ts
 var MediaAssetItemSchema = external_exports.object({
-  media_type: external_exports.enum(["video", "still"]).describe("Type of media"),
+  media_type: external_exports.enum(["video", "still", "document"]).describe("Type of media. Use document for a consent-agreement PDF (url required, PDF only)."),
+  filename: external_exports.string().max(200).optional().describe("Display filename for a document (media_type document). Defaults to the URL's file name."),
   media_source: external_exports.enum(["uploaded", "recorded"]).default("uploaded").describe("How the media was created"),
   url: external_exports.string().url().optional().describe("Public URL that links directly to the media file itself. When provided, the server fetches and stores it directly."),
   captions: external_exports.array(
@@ -18624,9 +18804,16 @@ function mapFileEntryToItem(file) {
   if (category === "video") {
     return { ok: true, item: { media_type: "video", media_source: "uploaded", url: file.download_url } };
   }
+  if (mimeType === "application/pdf") {
+    const filename = file.name ?? file.file_name;
+    return {
+      ok: true,
+      item: { media_type: "document", media_source: "uploaded", url: file.download_url, ...filename ? { filename } : {} }
+    };
+  }
   return {
     ok: false,
-    error: `Attached file type "${mimeType || "unknown"}" is not supported. Attach an image or video file, or provide a direct URL instead.`
+    error: `Attached file type "${mimeType || "unknown"}" is not supported. Attach an image, video or PDF file, or provide a direct URL instead.`
   };
 }
 function registerUploadMediaAssetTool(server) {
@@ -18636,38 +18823,55 @@ function registerUploadMediaAssetTool(server) {
       title: "Upload Media Asset",
       description: `Put one or more media files into your workspace media library (max 10, uploaded sequentially). This is step one of attaching media to a node - follow up with clipform_attach_node_media to place the returned media_asset_id on a node.
 
-When a public URL is provided, the media is fetched and stored automatically. For video: ingested via Mux. For image: stored in Supabase. Word-level captions from clipform_generate_tts enable per-word highlighting in the viewer once attached - pass the caption_ref it returned instead of hand-copying the captions array.
+When a public URL is provided, the media is fetched and stored automatically. The API picks where each asset is stored based on its size and type. Word-level captions from clipform_generate_tts enable per-word highlighting in the viewer once attached - pass the caption_ref it returned instead of hand-copying the captions array.
+
+PDFs (media_type document) are for consent agreements: they return a document descriptor, not a media_asset_id.
 
 Provide media via \`items\` (explicit type + URL), \`files\` (files attached by the host client), or both. At least one is required.`,
       inputSchema: {
+        workspace_id: workspaceIdInput,
+        form_id: formIdTargetInput,
         items: external_exports.array(MediaAssetItemSchema).min(1).max(10).optional().describe("One or more media items to create as workspace library assets"),
-        files: external_exports.array(FileEntrySchema).min(1).max(10).optional().describe("Files attached by the host client. Each becomes a video or still library asset based on its declared mime_type.")
+        files: external_exports.array(FileEntrySchema).min(1).max(10).optional().describe("Files attached by the host client. Each becomes a video or still library asset (or a consent-agreement document for application/pdf) based on its declared mime_type.")
       },
       outputSchema: {
         results: external_exports.array(
           external_exports.object({
-            media_asset_id: external_exports.string().optional(),
+            media_asset_id: external_exports.string().optional().describe("Absent for documents"),
             media_type: external_exports.string(),
+            document: external_exports.object({
+              storage_path: external_exports.string(),
+              filename: external_exports.string(),
+              url: external_exports.string(),
+              version: external_exports.string()
+            }).optional().describe("Consent-agreement descriptor (documents only) - set as consent_items[i].document via clipform_update_node"),
             stored: external_exports.boolean().describe("Bytes already stored (URL-based); false when an upload_url is pending"),
             upload_url: external_exports.string().optional(),
             upload_method: external_exports.string().optional(),
             ok: external_exports.boolean(),
             error: external_exports.string().optional()
           })
-        ).describe("One result per item, in order")
+        ).describe("One result per item, in order"),
+        workspace_name: external_exports.string().optional().describe("Name of the workspace the media library entries were created in")
       },
       annotations: {
         readOnlyHint: false,
         destructiveHint: false,
         idempotentHint: false,
-        openWorldHint: false
+        // Open-world: fetches an arbitrary caller-supplied URL (and may hand
+        // larger video to a third-party streaming provider) (#4434).
+        openWorldHint: true
       },
       // Apps SDK convention (openai-apps-sdk-examples#185): a host client only
       // hydrates a file attachment into a TOP-LEVEL tool argument named here -
       // same mechanism create-form.ts uses for anthropic/alwaysLoad.
       _meta: { "openai/fileParams": ["files"] }
     },
-    async ({ items, files }) => {
+    // `form_id` is consumed centrally by `runWithWorkspaceTarget` (server.ts)
+    // BEFORE this handler runs - it's a routing hint only (#4621), never
+    // forwarded to the API: this route takes no form_id and /me below still
+    // resolves the (now-targeted) workspace.
+    async ({ items, files, form_id: _form_id }) => {
       if ((!items || items.length === 0) && (!files || files.length === 0)) {
         return errorResult("Provide at least one media item via `items` or `files`.");
       }
@@ -18681,6 +18885,7 @@ Provide media via \`items\` (explicit type + URL), \`files\` (files attached by
       }
       const me = meResult.data;
       const workspaceId = me.workspace?.id ?? null;
+      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" ? me.workspace?.name ?? void 0 : void 0;
       if (!workspaceId) {
         return errorResult(
           "No workspace available. This usually means authentication is misconfigured - check your API key or OAuth connection."
@@ -18712,6 +18917,7 @@ Provide media via \`items\` (explicit type + URL), \`files\` (files attached by
           media_source: item.media_source
         };
         if (item.url) createBody.url = item.url;
+        if (item.filename) createBody.filename = item.filename;
         if (item.captions) createBody.captions = item.captions;
         if (item.caption_ref) createBody.caption_ref = item.caption_ref;
         if (item.ai_generated !== void 0) createBody.ai_generated = item.ai_generated;
@@ -18722,6 +18928,33 @@ Provide media via \`items\` (explicit type + URL), \`files\` (files attached by
           results.push({ media_type: item.media_type, stored: false, ok: false, error: created.error });
           continue;
         }
+        if (item.media_type === "document") {
+          const d = created.data;
+          if (typeof d.storage_path !== "string" || typeof d.url !== "string" || typeof d.version !== "string" || !d.version) {
+            const error2 = "document upload did not return a document descriptor.";
+            lines.push(`FAILED: ${error2}`);
+            lines.push("");
+            results.push({ media_type: "document", stored: false, ok: false, error: error2 });
+            continue;
+          }
+          const document = {
+            storage_path: d.storage_path,
+            filename: String(d.filename ?? item.filename ?? "agreement.pdf"),
+            url: d.url,
+            version: d.version
+          };
+          successCount++;
+          results.push({ media_type: "document", stored: true, ok: true, document });
+          lines.push(
+            [
+              `Document stored: ${document.filename}`,
+              `Descriptor: ${JSON.stringify(document)}`,
+              `Set this on a Details node consent item via clipform_update_node: consent_items[i].document = <descriptor>, require_scroll_to_accept: true. Do not use clipform_attach_node_media.`
+            ].join("\n")
+          );
+          lines.push("");
+          continue;
+        }
         const mediaAssetId = created.data.media_asset_id;
         if (!mediaAssetId) {
           const error2 = `upload did not return a media asset id (route ${String(created.data.route ?? "unknown")}).`;
@@ -18763,9 +18996,12 @@ Provide media via \`items\` (explicit type + URL), \`files\` (files attached by
         lines.unshift(`Media asset upload: ${successCount}/${entries.length} succeeded
 `);
       }
-      lines.push(`Attach these to nodes with clipform_attach_node_media.`);
+      if (results.some((r) => r.ok && r.media_asset_id)) {
+        lines.push(`Attach these to nodes with clipform_attach_node_media.`);
+      }
       if (successCount === 0) return errorResult(lines.join("\n"));
-      return structuredResult(lines.join("\n"), { results });
+      if (workspaceName) lines.push(`Workspace: ${workspaceName}`);
+      return structuredResult(lines.join("\n"), { results, ...workspaceName ? { workspace_name: workspaceName } : {} });
     }
   );
 }
@@ -18776,9 +19012,10 @@ function registerCompleteMediaUploadTool(server) {
     "clipform_complete_media_upload",
     {
       title: "Complete Media Upload",
-      description: `Confirm a signed-PUT still image upload finished, after PUTting the bytes to the upload_url returned by clipform_upload_media_asset. The API verifies the object actually landed in storage before flipping the asset from processing to ready - call this right after the PUT succeeds, or the asset stays invisible in the library. Not needed for video uploads (TUS/Mux settle automatically).`,
+      description: `Confirm a signed-PUT still image upload finished, after PUTting the bytes to the upload_url returned by clipform_upload_media_asset. The API verifies the object actually landed in storage before flipping the asset from processing to ready - call this right after the PUT succeeds, or the asset stays invisible in the library. Not needed for video uploads (they settle automatically).`,
       inputSchema: {
-        media_asset_id: external_exports.string().uuid().describe("The media_asset_id returned by clipform_upload_media_asset for the still image")
+        media_asset_id: external_exports.string().uuid().describe("The media_asset_id returned by clipform_upload_media_asset for the still image"),
+        form_id: formIdTargetInput
       },
       outputSchema: {
         media_asset_id: external_exports.string(),
@@ -18791,7 +19028,10 @@ function registerCompleteMediaUploadTool(server) {
         openWorldHint: false
       }
     },
-    async ({ media_asset_id }) => {
+    // `form_id` (#4621) is a routing hint only, consumed centrally by
+    // `runWithWorkspaceTarget` (server.ts) before this handler runs - never
+    // forwarded to the API below (this route takes no form_id).
+    async ({ media_asset_id, form_id: _form_id }) => {
       const meResult = await callApi("/me", { method: "GET" });
       if (!meResult.ok) {
         return errorResult(`Unable to determine workspace: ${meResult.error}`);
@@ -18970,7 +19210,7 @@ function registerDeleteNodeMediaTool(server) {
     "clipform_delete_node_media",
     {
       title: "Delete Node Media",
-      description: `Remove media from a node. Deletes the media record and cleans up external resources (Mux video asset, storage file). Requires user confirmation before it runs.`,
+      description: `Remove media from a node. Deletes the media record and the stored media asset (including any copy held by a third-party video provider). Requires user confirmation before it runs.`,
       inputSchema: {
         form_id: external_exports.string().uuid().describe("The form UUID (returned by clipform_create_form, not the short share_id from the URL)"),
         node_id: external_exports.string().describe("The node ID"),
@@ -18982,7 +19222,9 @@ function registerDeleteNodeMediaTool(server) {
         // Deleting already-removed media has no further effect - textbook
         // idempotent delete (#2976).
         idempotentHint: true,
-        openWorldHint: false
+        // Open-world: also deletes any copy held by a third-party video
+        // provider (#4434).
+        openWorldHint: true
       }
     },
     async ({ form_id, node_id, confirm }) => {
@@ -19124,10 +19366,10 @@ function registerSearchNewsTool(server) {
   server.registerTool(
     "clipform_search_news",
     {
-      title: "Search News (fallback)",
-      description: `Fallback news lookup for clients without native web search. Returns structured current-news articles from NewsAPI and The Guardian.
+      title: "Search Recent News",
+      description: `Search recent news articles from NewsAPI and The Guardian and return them as structured results.
 
-Coverage: recent events, people, and topics (post-May-2025). Does NOT cover timeless topics (history, geography, science). Narrower and less current than native web search tools (WebSearch, web fetch) when available.
+Coverage: recent events, people, and topics (post-May-2025). Does NOT cover timeless topics (history, geography, science).
 
 Returns: article title, source, author, date, URL, description, and image URL per result.`,
       inputSchema: {
@@ -19212,6 +19454,8 @@ Use the tone parameter to direct HOW the voice speaks. Always set a tone that ma
 
 Pass one item or many (max 10) - multiple items run in parallel. Returns audio_url and caption_ref per item - pass caption_ref downstream to clipform_render_composition / clipform_render_video_template / clipform_upload_media_asset to attach this run's word-level captions instead of hand-copying the captions array.`,
       inputSchema: {
+        workspace_id: workspaceIdInput,
+        form_id: formIdTargetInput,
         items: external_exports.array(TtsItemSchema).min(1).max(10).describe("One or more TTS items to generate")
       },
       outputSchema: {
@@ -19227,7 +19471,11 @@ Pass one item or many (max 10) - multiple items run in parallel. Returns audio_u
       },
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false }
     },
-    async ({ items }) => {
+    // `form_id` (#4621) is a routing hint only, consumed centrally by
+    // `runWithWorkspaceTarget` (server.ts) before this handler runs - it
+    // swaps the auth context's workspace_id read below, but is never
+    // forwarded to the API itself (the /internal/tts route takes no form_id).
+    async ({ items, form_id: _form_id }) => {
       const workspace_id = getMcpAuth()?.workspace_id;
       const results = await Promise.allSettled(
         items.map(
@@ -20609,6 +20857,15 @@ function createServer(options) {
     { ...MCP_SERVER_IDENTITY },
     { instructions: buildInstructions(caps) }
   );
+  const rawServer = server.server;
+  const nativeSetRequestHandler = rawServer.setRequestHandler.bind(rawServer);
+  let baseListToolsHandler;
+  rawServer.setRequestHandler = (schema, handler) => {
+    if (schema === ListToolsRequestSchema && baseListToolsHandler === void 0) {
+      baseListToolsHandler = handler;
+    }
+    return nativeSetRequestHandler(schema, handler);
+  };
   const _registerTool = server.registerTool.bind(server);
   server.registerTool = (name, config2, handler) => {
     const requiredTier = MCP_TOOL_TIERS[name] ?? 0;
@@ -20632,7 +20889,7 @@ function createServer(options) {
       config2,
       (...args) => runWithMcpTool(name, async () => {
         try {
-          return await handler(...args);
+          return await runWithWorkspaceTarget(args[0], () => handler(...args));
         } catch (err) {
           const error2 = err instanceof Error ? err : new Error(String(err));
           options?.onToolError?.(name, error2);
@@ -20675,6 +20932,25 @@ function createServer(options) {
   registerGetWorkflowTool(server, caps);
   registerPrompts(server, caps);
   registerResources(server, caps);
+  rawServer.setRequestHandler = nativeSetRequestHandler;
+  if (baseListToolsHandler) {
+    nativeSetRequestHandler(ListToolsRequestSchema, async (request, extra) => {
+      const base = await baseListToolsHandler(request, extra);
+      return {
+        ...base,
+        tools: base.tools.map((tool) => {
+          const security = MCP_TOOL_SECURITY[tool.name];
+          if (security === void 0) return tool;
+          const existingMeta = tool._meta ?? {};
+          return {
+            ...tool,
+            securitySchemes: security,
+            _meta: { ...existingMeta, securitySchemes: security }
+          };
+        })
+      };
+    });
+  }
   return server;
 }
 
@@ -20685,4 +20961,4 @@ export {
   buildInstructions,
   createServer
 };
-//# sourceMappingURL=chunk-QBPE32AV.js.map
+//# sourceMappingURL=chunk-4XCXDH3I.js.map