@clipform/mcp-server 3.2.1 → 3.3.0

package/dist/{chunk-236IGTEY.js → chunk-ELK26KWM.js}

@@ -5,7 +5,7 @@ import {
   FULL_CAPS,
   callApi,
   getSessionContext
-} from "./chunk-VZKMOMFJ.js";
+} from "./chunk-SEZ37YSH.js";
 
 // src/lib/guides.ts
 var guidesPromise = null;
@@ -143,4 +143,4 @@ export {
   getGuideUri,
   registerResources
 };
-//# sourceMappingURL=chunk-236IGTEY.js.map
+//# sourceMappingURL=chunk-ELK26KWM.js.map

package/dist/{chunk-VZKMOMFJ.js → chunk-SEZ37YSH.js}

@@ -795,6 +795,7 @@ var NODE_TYPES = {
     // Never appears in a completed submission's answers (system node, no
     // output_schema) - false is a no-op default, set for guard-test coverage.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: null,
     config_schema: null,
     response_schema: null,
@@ -821,6 +822,7 @@ var NODE_TYPES = {
     show_in_results: true,
     // Short selected-option label - safe to render inline in a notification (#4154).
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: {
       selection_mode: "single",
       choice: { enable_branching: false, record_scores: false },
@@ -932,6 +934,7 @@ var NODE_TYPES = {
     // still swaps a recorded audio/video answer for a typed placeholder
     // based on the answer's own media type, not this flag.
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: {
       formats: [
         { order: 0, format: "text" },
@@ -1071,6 +1074,7 @@ var NODE_TYPES = {
     show_in_results: true,
     // A bare numeric value - short enough to render inline (#4154).
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: null,
     config_schema: {
       type: "object",
@@ -1108,6 +1112,13 @@ var NODE_TYPES = {
     // Structured provider data (calendly/google_meet), not a flat value -
     // a notification renders a typed placeholder instead (#4154).
     notify_inline: false,
+    // Object granularity, not a dotted path (#4618): every property under
+    // these provider objects (scheduling_url, event_type_uri, calendar_id) is
+    // the source workspace's own calendar, so save_form strips the whole
+    // object on cross-workspace copy. google_meet is included even though it
+    // is absent from the publish gate below (pre-existing drift, not widened
+    // here) because calendar_id is owner-scoped regardless.
+    owner_scoped_config_keys: ["calendly", "calcom", "google_meet"],
     default_config: null,
     config_schema: {
       type: "object",
@@ -1189,6 +1200,7 @@ var NODE_TYPES = {
     // Key contact fields (first name, email) are the whole point of a
     // notification for this node type - always inline (#4154).
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: {
       fields: [
         { id: "first_name", type: "first_name", label: "First Name", enabled: true, required: true },
@@ -1365,6 +1377,7 @@ var NODE_TYPES = {
     show_in_results: true,
     // Files, not a flat value - a notification renders a typed placeholder (#4154).
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: null,
     config_schema: {
       type: "object",
@@ -1456,6 +1469,7 @@ var NODE_TYPES = {
     show_in_results: true,
     // An image, not a flat value - a notification renders a typed placeholder (#4154).
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: {
       paper_color: "#FAF9F6",
       stroke_colors: ["#1F2937", "#EF4444", "#3B82F6", "#22C55E", "#FACC15"],
@@ -1629,6 +1643,7 @@ var NODE_TYPES = {
     // A captured photo/video, not a flat value - a notification renders a
     // typed placeholder (#4154).
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: null,
     config_schema: {
       type: "object",
@@ -1740,6 +1755,7 @@ var NODE_TYPES = {
     // notification, same as the other control nodes (redirect, link_list,
     // end_screen). Required by the #4154 notify_inline invariant.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: {
       options: [
         { content: "Branch 1" },
@@ -1766,13 +1782,14 @@ var NODE_TYPES = {
     supports_media: false,
     is_system: false,
     show_in_results: true,
-    // Config keys that reference a workspace-scoped connected account (Stripe/etc
-    // via workspace_integrations). The SoT for save_form to strip on cross-workspace
-    // copy (#2064 part 2 - migration, not yet wired). Standing convention for any
-    // future OAuth/connected-account node (booking, shopify), not a payment special
-    // case - the publish gate's own showcase waiver (graph-validation.js) still
-    // names workspace_integration_id directly since it's the only per-type check today.
-    connection_config_keys: ["workspace_integration_id"],
+    // Config keys that are owner-scoped to the authoring workspace - a connected
+    // account (Stripe/etc via workspace_integrations), the owner's own uploaded
+    // files, or a calendar link - and so must NOT survive a cross-workspace copy
+    // (#4619/#4617/#4618/#4620 generalised this from the payment-only
+    // connection_config_keys). The SoT for save_form's strip. The publish gate's
+    // own showcase waiver (graph-validation.js) still names workspace_integration_id
+    // directly since it's the only per-type check today.
+    owner_scoped_config_keys: ["workspace_integration_id"],
     // A payment confirmation line is the whole point of a notification for
     // this node type - always inline (#4154).
     notify_inline: true,
@@ -1922,6 +1939,7 @@ var NODE_TYPES = {
     show_in_results: true,
     // Short selected-option label - safe to render inline (#4154).
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: {
       choice: { enable_branching: false },
       options: [
@@ -1986,6 +2004,7 @@ var NODE_TYPES = {
     show_in_results: false,
     // Short selected-option label - safe to render inline (#4154).
     notify_inline: true,
+    owner_scoped_config_keys: [],
     default_config: { options: [{ content: "Continue" }] },
     config_schema: {
       type: "object",
@@ -2027,6 +2046,7 @@ var NODE_TYPES = {
     // Terminal node - never appears in a completed submission's answers
     // (filtered by NON_COUNTABLE_FILTER); false is a no-op default.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: { url: "", auto_redirect: true },
     config_schema: {
       type: "object",
@@ -2060,6 +2080,7 @@ var NODE_TYPES = {
     // Terminal node - never appears in a completed submission's answers
     // (filtered by NON_COUNTABLE_FILTER); false is a no-op default.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: { links: [{ id: "default", url: "", title: "", description: "", order: 0 }], auto_redirect: false },
     config_schema: {
       type: "object",
@@ -2107,6 +2128,10 @@ var NODE_TYPES = {
     show_in_results: true,
     // Files, not a flat value - a notification renders a typed placeholder (#4154).
     notify_inline: false,
+    // The owner's own uploaded files (#4617) - stripped on cross-workspace
+    // copy so a forked node can't keep serving the source workspace's files;
+    // the publish gate's "No files uploaded" check then forces a fresh upload.
+    owner_scoped_config_keys: ["files"],
     default_config: null,
     config_schema: {
       type: "object",
@@ -2189,6 +2214,7 @@ var NODE_TYPES = {
     show_in_results: false,
     // No response_schema - never carries a flat answer value; false is a no-op default.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: { provider: "shopify", cta_mode: "checkout", source_mode: "manual" },
     config_schema: {
       type: "object",
@@ -2260,6 +2286,7 @@ var NODE_TYPES = {
     // Terminal node - never appears in a completed submission's answers
     // (filtered by NON_COUNTABLE_FILTER); false is a no-op default.
     notify_inline: false,
+    owner_scoped_config_keys: [],
     default_config: {
       title: "Thank you!",
       message: "Your response has been submitted."
@@ -2322,8 +2349,8 @@ for (const [type, def] of Object.entries(NODE_TYPES)) {
 var NODE_TYPES_LIST = Object.entries(NODE_TYPES).map(([type, def]) => ({ type, ...def })).sort((a, b) => a.sort_order - b.sort_order);
 var ACTIVE_NODE_TYPES = Object.entries(NODE_TYPES).filter(([, def]) => def.is_active && !def.is_system).map(([type]) => type);
 var NODE_TYPE_KEYS = Object.keys(NODE_TYPES);
-var CONNECTION_CONFIG_KEYS = Object.fromEntries(
-  Object.entries(NODE_TYPES).filter(([, def]) => Array.isArray(def.connection_config_keys) && def.connection_config_keys.length > 0).map(([type, def]) => [type, def.connection_config_keys])
+var OWNER_SCOPED_CONFIG_KEYS = Object.fromEntries(
+  Object.entries(NODE_TYPES).filter(([, def]) => Array.isArray(def.owner_scoped_config_keys) && def.owner_scoped_config_keys.length > 0).map(([type, def]) => [type, def.owner_scoped_config_keys])
 );
 var RESPONSE_SCHEMAS = Object.fromEntries(
   Object.entries(NODE_TYPES).map(([k, v]) => [k, v.response_schema])
@@ -3029,6 +3056,19 @@ var MCP_TOOL_TOOLSETS = {
   clipform_list_assets: "media",
   clipform_list_video_templates: "media"
 };
+var MCP_TOOL_SECURITY_SCHEMES = Object.freeze([
+  Object.freeze({ type: "noauth" }),
+  Object.freeze({ type: "oauth2", scopes: ["mcp"] })
+]);
+var MCP_TOOL_SECURITY = Object.freeze(
+  Object.fromEntries(
+    Object.keys(MCP_TOOL_TOOLSETS).map((name) => [name, MCP_TOOL_SECURITY_SCHEMES])
+  )
+);
+var MCP_ANON_PUBLISH_GATE = Object.freeze({
+  tool: "clipform_update_form",
+  argument: "is_live"
+});
 
 // src/lib/caps.ts
 var FULL_CAPS = Object.freeze({ media: true, research: true });
@@ -3136,10 +3176,14 @@ async function callApi(path, options = {}) {
         api_path: `${prefix}${path}`
       });
     }
+    const details = data.details;
+    const reason = details && typeof details.reason === "string" ? details.reason : void 0;
     return {
       ok: false,
       status: response.status,
-      error: errorMsg
+      error: errorMsg,
+      code: errorCode,
+      reason
     };
   }
   return { ok: true, data };
@@ -3158,12 +3202,28 @@ function recoveryHint(status, path) {
   }
   return void 0;
 }
-function errorResult(message) {
+function errorResult(message, meta) {
   return {
     content: [{ type: "text", text: message }],
-    isError: true
+    isError: true,
+    ...meta ? { _meta: meta } : {}
   };
 }
+var PROTECTED_RESOURCE_METADATA_URL = `${BUSINESS.urls.mcp}/.well-known/oauth-protected-resource`;
+function escapeChallengeValue(value) {
+  return value.replace(/[\r\n]/g, "").replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function isAnonymousAccountRequired(result) {
+  return result.status === 403 && result.code === "FORBIDDEN" && result.reason === "anonymous_not_allowed";
+}
+function authChallengeMeta(errorCode, description) {
+  const challenge = [
+    `Bearer error="${escapeChallengeValue(errorCode)}"`,
+    `error_description="${escapeChallengeValue(description)}"`,
+    `resource_metadata="${PROTECTED_RESOURCE_METADATA_URL}"`
+  ].join(", ");
+  return { "mcp/www_authenticate": [challenge] };
+}
 function textResult(text) {
   return {
     content: [{ type: "text", text }]
@@ -3245,13 +3305,17 @@ export {
   exposedCompositionIds,
   MCP_TOOL_TIERS,
   MCP_TOOL_TOOLSETS,
+  MCP_TOOL_SECURITY,
+  MCP_ANON_PUBLISH_GATE,
   FULL_CAPS,
   capsFromToolsets,
   callApi,
   errorResult,
+  isAnonymousAccountRequired,
+  authChallengeMeta,
   textResult,
   structuredResult,
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-VZKMOMFJ.js.map
+//# sourceMappingURL=chunk-SEZ37YSH.js.map