@clipform/mcp-server 3.3.1 → 3.7.1

package/dist/{chunk-4XCXDH3I.js → chunk-PXHGG57Z.js}

@@ -6,7 +6,7 @@ import {
   getWorkflowText,
   objectType,
   registerPrompts
-} from "./chunk-22BV4NSB.js";
+} from "./chunk-GJ3XQSQY.js";
 import {
   GUIDE_TYPES,
   QUIZ_VARIANTS,
@@ -15,13 +15,18 @@ import {
   getGuideUri,
   guideFallbackText,
   registerResources
-} from "./chunk-ELK26KWM.js";
+} from "./chunk-5SCRFNYJ.js";
+import {
+  ANON_PREVIEW_NOTICE,
+  FULL_CAPS,
+  anonPreviewNotice,
+  capsFromToolsets
+} from "./chunk-YOVLSXPW.js";
 import {
   ACTIVE_NODE_TYPES,
   CONTACT_FIELDS,
   FEATURE_FLAGS,
   FORM_TYPE_ALIASES,
-  FULL_CAPS,
   MCP_ANON_PUBLISH_GATE,
   MCP_TOOL_SECURITY,
   MCP_TOOL_TIERS,
@@ -31,7 +36,6 @@ import {
   authChallengeMeta,
   bfsOrder,
   callApi,
-  capsFromToolsets,
   defaultTarget,
   errorResult,
   exposedCompositionIds,
@@ -39,12 +43,12 @@ import {
   resolveFormType,
   structuredResult,
   textResult
-} from "./chunk-SEZ37YSH.js";
+} from "./chunk-SHTP4AJC.js";
 import {
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool
-} from "./chunk-A5CFGL27.js";
+} from "./chunk-VPF6MLKM.js";
 import {
   __commonJS,
   __export,
@@ -17240,7 +17244,7 @@ function registerCreateFormTool(server) {
     "clipform_create_form",
     {
       title: "Create Clipform",
-      description: `Create a new Clipform (interactive video-style form). Returns a viewer URL and form ID. When connected via an authenticated MCP client (e.g. claude.ai), the form lands directly in the user's workspace. Anonymous sessions get a claim URL to transfer ownership later.
+      description: `Create a new Clipform (interactive video-style form). Returns a viewer URL and form ID. When connected via an authenticated MCP client (e.g. claude.ai), the form lands directly in the user's workspace. Anonymous sessions build into a temporary account of their own: forms stay drafts with a private preview link. Some results also include a one-time claim URL that signs the user into that account; relay it when present.
 
 ${ONBOARDING_OFFER_TOOL_CUE}
 
@@ -17368,7 +17372,7 @@ Example: A form that asks a question, collects contact info, then finishes:
       });
       if (!createResult.ok) {
         const message = `Form NOT created (nothing was saved): ${createResult.error}`;
-        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("invalid_token", message)) : errorResult(message);
+        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("invalid_token", createResult.apiMessage ?? message)) : errorResult(message);
       }
       const { data } = createResult;
       const formId = data.form_id;
@@ -17413,6 +17417,8 @@ Example: A form that asks a question, collects contact info, then finishes:
         formUrl ? `The URLs above are exact values; constructed or guessed URLs return 404. Use the ${firstUrlLabel} URL and ${secondUrlLabel} URL as shown.` : `The ${firstUrlLabel} URL above is an exact value; constructed or guessed URLs return 404.`,
         `Pass form_id on follow-up tools (get_form, add_node, attach_node_media, etc.).`
       );
+      const anonNotice = isPreview ? anonPreviewNotice() : null;
+      if (anonNotice) lines.push(``, anonNotice);
       if (planContext) {
         const nodePart = planContext.node_limit === null ? "unlimited nodes" : `up to ${planContext.node_limit} nodes per form`;
         const formPart = planContext.form_limit === null ? "unlimited forms" : `up to ${planContext.form_limit} forms`;
@@ -17683,7 +17689,7 @@ function registerListFormsTool(server) {
     "clipform_list_forms",
     {
       title: "List Clipforms",
-      description: `List forms in your workspace with optional filtering. Returns paginated results (cursor-based). next_cursor is included when more results exist. To find or open a form by name, pass search with part of its title instead of paging through results.`,
+      description: `List forms in your workspace with optional filtering. Returns paginated results (cursor-based). next_cursor is included when more results exist. To find or open a form by name, pass search with part of its title instead of paging through results. Needs a signed-in Clipform account (an anonymous session is asked to sign in).`,
       inputSchema: {
         workspace_id: workspaceIdInput,
         limit: external_exports.number().int().min(1).max(100).optional().describe("Number of forms to return (default 25, max 100)"),
@@ -18034,7 +18040,10 @@ function registerUpdateFormTool(server) {
           body
         });
         if (!result.ok) {
-          return isAnonymousAccountRequired(result) ? errorResult(result.error, authChallengeMeta("invalid_token", result.error)) : errorResult(result.error);
+          return isAnonymousAccountRequired(result) ? errorResult(
+            result.error,
+            authChallengeMeta("invalid_token", result.apiMessage ?? result.error)
+          ) : errorResult(result.error);
         }
       }
       if (tags) {
@@ -18043,7 +18052,10 @@ function registerUpdateFormTool(server) {
           body: { tags }
         });
         if (!tagResult.ok) {
-          return isAnonymousAccountRequired(tagResult) ? errorResult(tagResult.error, authChallengeMeta("invalid_token", tagResult.error)) : errorResult(tagResult.error);
+          return isAnonymousAccountRequired(tagResult) ? errorResult(
+            tagResult.error,
+            authChallengeMeta("invalid_token", tagResult.apiMessage ?? tagResult.error)
+          ) : errorResult(tagResult.error);
         }
       }
       const updates = [];
@@ -18117,6 +18129,10 @@ Your form is live at: ${viewerUrl}
 Share this URL with respondents. View responses any time with clipform_get_results (form_id: ${form_id})${responsesUrl ? `, or in the dashboard: ${responsesUrl}` : ""}`;
         }
       }
+      const anonNotice = anonPreviewNotice();
+      if (anonNotice) resultText += `
+
+${anonNotice}`;
       return structuredResult(resultText, { form_id, updated_fields: updatedFields });
     }
   );
@@ -18151,7 +18167,7 @@ function registerDeleteFormTool(server) {
     "clipform_delete_form",
     {
       title: "Delete Clipform",
-      description: `Move a form and all its nodes to the trash. It stops accepting responses immediately and can be restored later. Requires user confirmation before it runs.`,
+      description: `Move a form and all its nodes to the trash. It stops accepting responses immediately and can be restored later. Requires user confirmation before it runs. Needs a signed-in Clipform account (an anonymous session is asked to sign in).`,
       inputSchema: {
         form_id: external_exports.string().uuid().describe("The form UUID to delete (returned by clipform_create_form, not the short share_id from the URL)"),
         confirm: external_exports.boolean().optional().describe(CONFIRM_FIELD_DESCRIPTION)
@@ -18258,7 +18274,7 @@ function registerGetResultsTool(server) {
     "clipform_get_results",
     {
       title: "Get Clipform Results",
-      description: `View response counts, choice/action answer breakdowns, and recent open-text answers for a form. Contact, file, draw, camera, and payment answers are counts only - use the dashboard for per-response detail.`,
+      description: `View response counts, choice/action answer breakdowns, and recent open-text answers for a form. Contact, file, draw, camera, and payment answers are counts only - use the dashboard for per-response detail. Needs a signed-in Clipform account (an anonymous session is asked to sign in).`,
       inputSchema: {
         form_id: external_exports.string().describe("The form UUID (returned by clipform_create_form, not the short share_id from the URL)")
       },
@@ -18361,7 +18377,7 @@ function registerGetResponsesTool(server) {
     "clipform_get_responses",
     {
       title: "List form responses",
-      description: "List a Clipform form's individual responses (submissions) with time filtering - complements clipform_get_results (aggregates). Answers questions like 'what came in during the last 24 hours', 'what's the longest answer', 'what did people say'. Text answers plus a non-PII payment summary (amount and status); contact details, file uploads, and audio/video answers are redacted to placeholders and the customer's payment details stay in the dashboard (the responses URL from clipform_get_form). Responses are sorted newest first unless sort: 'oldest'.",
+      description: "List a Clipform form's individual responses (submissions) with time filtering - complements clipform_get_results (aggregates). Answers questions like 'what came in during the last 24 hours', 'what's the longest answer', 'what did people say'. Text answers plus a non-PII payment summary (amount and status); contact details, file uploads, and audio/video answers are redacted to placeholders and the customer's payment details stay in the dashboard (the responses URL from clipform_get_form). Responses are sorted newest first unless sort: 'oldest'. Needs a signed-in Clipform account (an anonymous session is asked to sign in).",
       inputSchema: {
         form_id: external_exports.string().describe("Form UUID (from clipform_list_forms / clipform_create_form)"),
         since: external_exports.string().datetime({ offset: true }).optional().describe("Only responses submitted at or after this ISO 8601 time (e.g. '2026-08-29T00:00:00Z')"),
@@ -18498,7 +18514,7 @@ function registerWhoamiTool(server) {
     "clipform_whoami",
     {
       title: "Who Am I",
-      description: `Show the current identity: auth mode (api key, oauth, session, or anonymous), active workspace, and plan limits.`,
+      description: `Show the current identity: auth mode (api key, oauth, session, or anonymous), active workspace, and plan limits. Needs a signed-in Clipform account (an anonymous session is asked to sign in).`,
       inputSchema: {},
       outputSchema: {
         auth_mode: external_exports.enum(["api_key", "oauth", "session", "anonymous"]).describe("How this session is authenticated"),
@@ -18515,7 +18531,8 @@ function registerWhoamiTool(server) {
         links: external_exports.object({
           dashboard: external_exports.string().describe("Dashboard home for the active workspace."),
           forms: external_exports.string().describe("Forms list for the active workspace.")
-        }).optional().describe("Workspace-level dashboard links - only present for a non-anonymous caller.")
+        }).optional().describe("Workspace-level dashboard links - only present for a non-anonymous caller."),
+        notice: external_exports.string().optional().describe("Anonymous sessions only: the account is a temporary preview until claimed.")
       },
       annotations: {
         readOnlyHint: true,
@@ -18531,8 +18548,9 @@ function registerWhoamiTool(server) {
         return errorResult(result.error);
       }
       const me = result.data;
-      const authMode = me.auth_mode ?? "anonymous";
-      const isAuthenticated = me.auth_mode != null && me.auth_mode !== "anonymous";
+      const ctx = getMcpAuth();
+      const authMode = ctx?.is_anonymous ? "anonymous" : me.auth_mode ?? "anonymous";
+      const isAuthenticated = authMode !== "anonymous";
       const workspace = me.workspace ? { id: me.workspace.id, name: me.workspace.name } : null;
       const plan = {
         name: me.plan?.name ?? "Free",
@@ -18549,7 +18567,6 @@ function registerWhoamiTool(server) {
       if (Array.isArray(me.workspaces)) {
         structured.workspaces = me.workspaces.map((w) => ({ id: w.id, name: w.name }));
       }
-      const ctx = getMcpAuth();
       if (!structured.workspaces && ctx?.listWorkspaces) {
         try {
           const list = await ctx.listWorkspaces();
@@ -18569,6 +18586,13 @@ function registerWhoamiTool(server) {
           `Workspaces you can act in (pass one of these ids as the workspace argument to target it; omit it to use the default): ` + list.map((w) => `${w.name} (${w.id})`).join(", ")
         );
       }
+      if (authMode === "anonymous") {
+        structured.notice = ANON_PREVIEW_NOTICE;
+        lines.push(ANON_PREVIEW_NOTICE);
+        lines.push(
+          "Anonymous session: forms are previews until claimed. Open the claim URL from clipform_create_form (or sign up) to claim the workspace and publish."
+        );
+      }
       if (structured.links) {
         const links = structured.links;
         lines.push(`Dashboard: ${links.dashboard}`, `Forms list: ${links.forms}`);
@@ -20411,12 +20435,18 @@ function registerListAssetsTool(server) {
       annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
     },
     async ({ type }) => {
-      const result = await callApi("/internal/assets", {
-        method: "GET",
-        params: { type: type ?? "all" }
-      });
-      if (!result.ok) return errorResult(result.error);
-      const data = result.data;
+      const loader = getMcpAuth()?.loadInternalContent;
+      let data;
+      if (loader) {
+        data = await loader("assets", { type: type ?? "all" });
+      } else {
+        const result = await callApi("/internal/assets", {
+          method: "GET",
+          params: { type: type ?? "all" }
+        });
+        if (!result.ok) return errorResult(result.error);
+        data = result.data;
+      }
       const lines = [];
       const structured = {
         sfx: (data.sfx ?? []).map((s) => ({ name: s.name, description: s.description ?? null, path: s.path })),
@@ -20961,4 +20991,4 @@ export {
   buildInstructions,
   createServer
 };
-//# sourceMappingURL=chunk-4XCXDH3I.js.map
+//# sourceMappingURL=chunk-PXHGG57Z.js.map