@clipform/mcp-server 3.2.1 → 3.3.1

package/dist/{chunk-EQ6WNIA5.js → chunk-22BV4NSB.js}

@@ -3,7 +3,7 @@ import {
   WORKFLOW_TYPES,
   getDiscoveryParams,
   getSessionContextWithAuth
-} from "./chunk-VZKMOMFJ.js";
+} from "./chunk-SEZ37YSH.js";
 import {
   __export
 } from "./chunk-G3PMV62Z.js";
@@ -4856,4 +4856,4 @@ export {
   getWorkflowText,
   registerPrompts
 };
-//# sourceMappingURL=chunk-EQ6WNIA5.js.map
+//# sourceMappingURL=chunk-22BV4NSB.js.map

package/dist/{chunk-J7727374.js → chunk-4XCXDH3I.js}

@@ -6,7 +6,7 @@ import {
   getWorkflowText,
   objectType,
   registerPrompts
-} from "./chunk-EQ6WNIA5.js";
+} from "./chunk-22BV4NSB.js";
 import {
   GUIDE_TYPES,
   QUIZ_VARIANTS,
@@ -15,27 +15,31 @@ import {
   getGuideUri,
   guideFallbackText,
   registerResources
-} from "./chunk-236IGTEY.js";
+} from "./chunk-ELK26KWM.js";
 import {
   ACTIVE_NODE_TYPES,
   CONTACT_FIELDS,
   FEATURE_FLAGS,
   FORM_TYPE_ALIASES,
   FULL_CAPS,
+  MCP_ANON_PUBLISH_GATE,
+  MCP_TOOL_SECURITY,
   MCP_TOOL_TIERS,
   MCP_TOOL_TOOLSETS,
   NODE_TYPES,
   NON_COUNTABLE_TYPES,
+  authChallengeMeta,
   bfsOrder,
   callApi,
   capsFromToolsets,
   defaultTarget,
   errorResult,
   exposedCompositionIds,
+  isAnonymousAccountRequired,
   resolveFormType,
   structuredResult,
   textResult
-} from "./chunk-VZKMOMFJ.js";
+} from "./chunk-SEZ37YSH.js";
 import {
   getMcpAuth,
   runWithMcpAuth,
@@ -17363,7 +17367,8 @@ Example: A form that asks a question, collects contact info, then finishes:
         timeoutMs: 12e4
       });
       if (!createResult.ok) {
-        return errorResult(`Form NOT created (nothing was saved): ${createResult.error}`);
+        const message = `Form NOT created (nothing was saved): ${createResult.error}`;
+        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("invalid_token", message)) : errorResult(message);
       }
       const { data } = createResult;
       const formId = data.form_id;
@@ -17964,6 +17969,11 @@ function registerGetFormTool(server) {
 }
 
 // src/tools/update-form.ts
+if (MCP_ANON_PUBLISH_GATE.tool !== "clipform_update_form") {
+  throw new Error(
+    `update-form.ts registers "clipform_update_form" but MCP_ANON_PUBLISH_GATE.tool is "${MCP_ANON_PUBLISH_GATE.tool}" - update both sides together (packages/config/index.js and this file's registerTool call) or the Claude lazy-auth HTTP gate silently stops matching this tool.`
+  );
+}
 function registerUpdateFormTool(server) {
   server.registerTool(
     "clipform_update_form",
@@ -18024,7 +18034,7 @@ function registerUpdateFormTool(server) {
           body
         });
         if (!result.ok) {
-          return errorResult(result.error);
+          return isAnonymousAccountRequired(result) ? errorResult(result.error, authChallengeMeta("invalid_token", result.error)) : errorResult(result.error);
         }
       }
       if (tags) {
@@ -18033,7 +18043,7 @@ function registerUpdateFormTool(server) {
           body: { tags }
         });
         if (!tagResult.ok) {
-          return errorResult(tagResult.error);
+          return isAnonymousAccountRequired(tagResult) ? errorResult(tagResult.error, authChallengeMeta("invalid_token", tagResult.error)) : errorResult(tagResult.error);
         }
       }
       const updates = [];
@@ -20847,6 +20857,15 @@ function createServer(options) {
     { ...MCP_SERVER_IDENTITY },
     { instructions: buildInstructions(caps) }
   );
+  const rawServer = server.server;
+  const nativeSetRequestHandler = rawServer.setRequestHandler.bind(rawServer);
+  let baseListToolsHandler;
+  rawServer.setRequestHandler = (schema, handler) => {
+    if (schema === ListToolsRequestSchema && baseListToolsHandler === void 0) {
+      baseListToolsHandler = handler;
+    }
+    return nativeSetRequestHandler(schema, handler);
+  };
   const _registerTool = server.registerTool.bind(server);
   server.registerTool = (name, config2, handler) => {
     const requiredTier = MCP_TOOL_TIERS[name] ?? 0;
@@ -20913,6 +20932,25 @@ function createServer(options) {
   registerGetWorkflowTool(server, caps);
   registerPrompts(server, caps);
   registerResources(server, caps);
+  rawServer.setRequestHandler = nativeSetRequestHandler;
+  if (baseListToolsHandler) {
+    nativeSetRequestHandler(ListToolsRequestSchema, async (request, extra) => {
+      const base = await baseListToolsHandler(request, extra);
+      return {
+        ...base,
+        tools: base.tools.map((tool) => {
+          const security = MCP_TOOL_SECURITY[tool.name];
+          if (security === void 0) return tool;
+          const existingMeta = tool._meta ?? {};
+          return {
+            ...tool,
+            securitySchemes: security,
+            _meta: { ...existingMeta, securitySchemes: security }
+          };
+        })
+      };
+    });
+  }
   return server;
 }
 
@@ -20923,4 +20961,4 @@ export {
   buildInstructions,
   createServer
 };
-//# sourceMappingURL=chunk-J7727374.js.map
+//# sourceMappingURL=chunk-4XCXDH3I.js.map