@clipform/mcp-server 3.3.1 → 3.7.1

package/dist/{chunk-SEZ37YSH.js → chunk-SHTP4AJC.js}

@@ -2,8 +2,10 @@ import {
   MCP_ANONYMOUS_HEADER,
   MCP_AUTH_VIA_HEADER,
   MCP_MINT_PROOF_HEADER,
+  MCP_SESSION_ID_HEADER,
+  MCP_SESSION_PROOF_HEADER,
   getMcpAuth
-} from "./chunk-A5CFGL27.js";
+} from "./chunk-VPF6MLKM.js";
 import {
   isAuthFault,
   isServerFault,
@@ -761,6 +763,38 @@ var FEATURE_FLAGS = {
   }
 };
 
+// ../config/help-links.js
+var HELP_TOPICS = {
+  goLive: { path: "/help/sharing", anchor: "go-live" },
+  cantGoLive: { path: "/help/sharing", anchor: "cant-go-live" },
+  liveAndDraft: { path: "/help/managing-forms", anchor: "live-and-draft" },
+  publishingChanges: { path: "/help/managing-forms", anchor: "publishing-changes" },
+  embedding: { path: "/help/embed", anchor: null },
+  emailShare: { path: "/help/sharing", anchor: "share-by-email" },
+  publicResults: { path: "/help/public-results", anchor: null },
+  trash: { path: "/help/managing-forms", anchor: "trash" },
+  customDomains: { path: "/help/domains", anchor: null },
+  customPath: { path: "/help/links", anchor: "custom-path-on-your-domain" },
+  // Per-node-type deep-links into help/node-types.mdx (#3963). Keyed
+  // `node_<nodeType>` so nodeHelpLink() (index.js) can look one up straight
+  // from a node's type id.
+  node_choice: { path: "/help/node-types", anchor: "choice" },
+  node_open: { path: "/help/node-types", anchor: "open-ended" },
+  node_details: { path: "/help/node-types", anchor: "details" },
+  node_button: { path: "/help/node-types", anchor: "button" },
+  node_end_screen: { path: "/help/node-types", anchor: "end-screen" },
+  node_redirect: { path: "/help/node-types", anchor: "redirect" },
+  node_file_download: { path: "/help/node-types", anchor: "file-download" },
+  node_payment: { path: "/help/node-types", anchor: "payment" }
+};
+function buildHelpLinks(docsBaseUrl) {
+  const links = {};
+  for (const [key, { path, anchor }] of Object.entries(HELP_TOPICS)) {
+    links[key] = `${docsBaseUrl}${path}${anchor ? `#${anchor}` : ""}`;
+  }
+  return links;
+}
+
 // ../config/node-types.js
 var RESPONSE_FORMATS = ["text", "audio", "video"];
 var CONSENT_TYPES = ["consent", "opt_in"];
@@ -2629,38 +2663,6 @@ function getDiscoveryParams(formType, variant, mode = "full") {
   return params;
 }
 
-// ../config/help-links.js
-var HELP_TOPICS = {
-  goLive: { path: "/help/sharing", anchor: "go-live" },
-  cantGoLive: { path: "/help/sharing", anchor: "cant-go-live" },
-  liveAndDraft: { path: "/help/managing-forms", anchor: "live-and-draft" },
-  publishingChanges: { path: "/help/managing-forms", anchor: "publishing-changes" },
-  embedding: { path: "/help/embed", anchor: null },
-  emailShare: { path: "/help/sharing", anchor: "share-by-email" },
-  publicResults: { path: "/help/public-results", anchor: null },
-  trash: { path: "/help/managing-forms", anchor: "trash" },
-  customDomains: { path: "/help/domains", anchor: null },
-  customPath: { path: "/help/links", anchor: "custom-path-on-your-domain" },
-  // Per-node-type deep-links into help/node-types.mdx (#3963). Keyed
-  // `node_<nodeType>` so nodeHelpLink() (index.js) can look one up straight
-  // from a node's type id.
-  node_choice: { path: "/help/node-types", anchor: "choice" },
-  node_open: { path: "/help/node-types", anchor: "open-ended" },
-  node_details: { path: "/help/node-types", anchor: "details" },
-  node_button: { path: "/help/node-types", anchor: "button" },
-  node_end_screen: { path: "/help/node-types", anchor: "end-screen" },
-  node_redirect: { path: "/help/node-types", anchor: "redirect" },
-  node_file_download: { path: "/help/node-types", anchor: "file-download" },
-  node_payment: { path: "/help/node-types", anchor: "payment" }
-};
-function buildHelpLinks(docsBaseUrl) {
-  const links = {};
-  for (const [key, { path, anchor }] of Object.entries(HELP_TOPICS)) {
-    links[key] = `${docsBaseUrl}${path}${anchor ? `#${anchor}` : ""}`;
-  }
-  return links;
-}
-
 // ../config/logic-types.js
 function isBranchingActive(node) {
   if (!node) return true;
@@ -2974,6 +2976,7 @@ var PLAN_LIMITS = {
     ]
   }
 };
+var CURRENT_PLAN_VERSIONS = { 0: "free_v1", 1: "pro_v2_1k" };
 var PRO_BANDS = ["pro_v2_1k", "pro_v2_5k", "pro_v2_20k"].map(
   (version) => ({ version, ...PLAN_LIMITS[version] })
 );
@@ -3060,9 +3063,58 @@ var MCP_TOOL_SECURITY_SCHEMES = Object.freeze([
   Object.freeze({ type: "noauth" }),
   Object.freeze({ type: "oauth2", scopes: ["mcp"] })
 ]);
+var MCP_TOOL_SECURITY_SCHEMES_SIGN_IN = Object.freeze([
+  Object.freeze({ type: "oauth2", scopes: ["mcp"] })
+]);
+var MCP_ANON_TOOLS = Object.freeze({
+  // account
+  clipform_list_forms: "sign_in",
+  clipform_get_form: "anon",
+  clipform_delete_form: "sign_in",
+  clipform_whoami: "sign_in",
+  clipform_get_results: "sign_in",
+  clipform_get_responses: "sign_in",
+  // forms
+  clipform_create_form: "anon",
+  clipform_import_form: "anon",
+  clipform_add_node: "anon",
+  clipform_update_node: "anon",
+  clipform_delete_node: "anon",
+  clipform_update_form: "anon",
+  clipform_set_logic: "anon",
+  clipform_get_guide: "anon_no_workspace",
+  clipform_get_workflow: "anon_no_workspace",
+  // research
+  clipform_search_news: "anon",
+  clipform_log_generation: "anon",
+  // media
+  clipform_fetch_boundary: "anon",
+  clipform_generate_tts: "anon",
+  clipform_render_composition: "anon",
+  clipform_render_video_template: "anon",
+  clipform_check_render: "anon",
+  clipform_upload_media_asset: "anon",
+  clipform_complete_media_upload: "anon",
+  clipform_attach_node_media: "anon",
+  clipform_get_node_media: "anon",
+  clipform_delete_node_media: "anon",
+  clipform_search_media: "anon",
+  clipform_search_music: "anon",
+  clipform_list_compositions: "anon",
+  clipform_list_assets: "anon_no_workspace",
+  clipform_list_video_templates: "anon"
+});
+var MCP_VIRTUAL_TOOLS = Object.freeze(["get_more_tools"]);
+function getMcpAnonAccess(toolName) {
+  if (MCP_VIRTUAL_TOOLS.includes(toolName)) return "anon_no_workspace";
+  return Object.prototype.hasOwnProperty.call(MCP_ANON_TOOLS, toolName) ? MCP_ANON_TOOLS[toolName] : "sign_in";
+}
 var MCP_TOOL_SECURITY = Object.freeze(
   Object.fromEntries(
-    Object.keys(MCP_TOOL_TOOLSETS).map((name) => [name, MCP_TOOL_SECURITY_SCHEMES])
+    Object.keys(MCP_TOOL_TOOLSETS).map((name) => [
+      name,
+      getMcpAnonAccess(name) === "sign_in" ? MCP_TOOL_SECURITY_SCHEMES_SIGN_IN : MCP_TOOL_SECURITY_SCHEMES
+    ])
   )
 );
 var MCP_ANON_PUBLISH_GATE = Object.freeze({
@@ -3070,16 +3122,6 @@ var MCP_ANON_PUBLISH_GATE = Object.freeze({
   argument: "is_live"
 });
 
-// src/lib/caps.ts
-var FULL_CAPS = Object.freeze({ media: true, research: true });
-function capsFromToolsets(toolsets) {
-  if (toolsets === void 0) return FULL_CAPS;
-  return {
-    media: toolsets.includes("media"),
-    research: toolsets.includes("research")
-  };
-}
-
 // src/lib/api-client.ts
 function getApiBaseUrl() {
   const url = process.env.API_URL;
@@ -3096,6 +3138,9 @@ function getApiBaseUrl() {
 }
 function getAuthHeaders() {
   const authCtx = getMcpAuth();
+  if (authCtx?.loadInternalContent && !authCtx.api_key) {
+    throw new Error("The anonymous no-workspace lane cannot call the API.");
+  }
   const apiKey = authCtx?.api_key || process.env.CLIPFORM_API_KEY;
   if (!apiKey) {
     const message = "CLIPFORM_API_KEY must be set.";
@@ -3116,6 +3161,12 @@ function getAuthHeaders() {
   if (authCtx?.mcp_mint_proof) {
     headers[MCP_MINT_PROOF_HEADER] = authCtx.mcp_mint_proof;
   }
+  if (authCtx?.mcp_session_proof) {
+    headers[MCP_SESSION_PROOF_HEADER] = authCtx.mcp_session_proof;
+  }
+  if (authCtx?.mcp_session_id) {
+    headers[MCP_SESSION_ID_HEADER] = authCtx.mcp_session_id;
+  }
   return headers;
 }
 async function callApi(path, options = {}) {
@@ -3163,8 +3214,10 @@ async function callApi(path, options = {}) {
   }
   const data = await response.json();
   if (!response.ok) {
-    const hint = recoveryHint(response.status, path);
     const apiMsg = data.error || `API error (${response.status})`;
+    const details = data.details;
+    const reason = details && typeof details.reason === "string" ? details.reason : void 0;
+    const hint = recoveryHint(response.status, path, reason);
     const errorMsg = hint ? `${apiMsg} - ${hint}` : apiMsg;
     const errorCode = typeof data.code === "string" ? data.code : void 0;
     if (isServerFault(response.status) || isAuthFault(response.status, errorCode)) {
@@ -3176,20 +3229,22 @@ async function callApi(path, options = {}) {
         api_path: `${prefix}${path}`
       });
     }
-    const details = data.details;
-    const reason = details && typeof details.reason === "string" ? details.reason : void 0;
     return {
       ok: false,
       status: response.status,
       error: errorMsg,
+      apiMessage: apiMsg,
       code: errorCode,
       reason
     };
   }
   return { ok: true, data };
 }
-function recoveryHint(status, path) {
+function recoveryHint(status, path, reason) {
   if (status === 401 || status === 403) {
+    if (reason === "anonymous_not_allowed" || getMcpAuth()?.is_anonymous) {
+      return "This session is anonymous - open the claim URL from clipform_create_form (or sign up) to claim your workspace, then retry.";
+    }
     return "Check credentials: the key comes from CLIPFORM_API_KEY or the OAuth session - read clipform://context/session for the active workspace and auth mode.";
   }
   if (status === 404) {
@@ -3216,11 +3271,11 @@ function escapeChallengeValue(value) {
 function isAnonymousAccountRequired(result) {
   return result.status === 403 && result.code === "FORBIDDEN" && result.reason === "anonymous_not_allowed";
 }
-function authChallengeMeta(errorCode, description) {
+function authChallengeMeta(errorCode, description, resourceMetadata = PROTECTED_RESOURCE_METADATA_URL) {
   const challenge = [
     `Bearer error="${escapeChallengeValue(errorCode)}"`,
     `error_description="${escapeChallengeValue(description)}"`,
-    `resource_metadata="${PROTECTED_RESOURCE_METADATA_URL}"`
+    `resource_metadata="${escapeChallengeValue(resourceMetadata)}"`
   ].join(", ");
   return { "mcp/www_authenticate": [challenge] };
 }
@@ -3236,57 +3291,6 @@ function structuredResult(text, structuredContent) {
   };
 }
 
-// src/lib/session-context.ts
-async function getSessionContextWithAuth() {
-  let result;
-  try {
-    result = await callApi("/me", { method: "GET" });
-  } catch {
-    return { text: "", authMode: "anonymous" };
-  }
-  if (!result.ok) return { text: "", authMode: "anonymous" };
-  const me = result.data;
-  const apiAuthMode = me.auth_mode ?? "anonymous";
-  const authMode = apiAuthMode === "anonymous" ? "anonymous" : "authenticated";
-  const plan = me.plan;
-  const lines = [];
-  lines.push("## Your Session");
-  if (authMode === "authenticated") {
-    lines.push(
-      apiAuthMode === "api_key" ? "Auth: API key (workspace-scoped)" : "Auth: signed in (connected to a Clipform account)"
-    );
-    lines.push(`Workspace: ${me.workspace?.name ?? "Unknown"}`);
-  } else {
-    lines.push("Auth: anonymous (not connected to a Clipform account)");
-    if (me.workspace) {
-      lines.push(`Workspace: ${me.workspace.name}`);
-    }
-  }
-  lines.push(`Plan: ${plan.name} (tier ${plan.tier})`);
-  if (plan.node_limit !== null) {
-    lines.push(`Question limit: ${plan.node_limit} per form`);
-  } else {
-    lines.push("Questions: unlimited");
-  }
-  if (plan.form_limit !== null) {
-    lines.push(`Form limit: ${plan.form_limit} forms`);
-  } else {
-    lines.push("Forms: unlimited");
-  }
-  if (plan.custom_theme === false) {
-    lines.push("Custom themes: not available on this plan");
-  }
-  if (authMode === "anonymous") {
-    lines.push(`
-Anonymous session: forms are not tied to a Clipform account until you sign in.`);
-  }
-  return { text: lines.join("\n"), authMode };
-}
-async function getSessionContext() {
-  const { text } = await getSessionContextWithAuth();
-  return text;
-}
-
 export {
   FEATURE_FLAGS,
   NODE_TYPES,
@@ -3301,21 +3305,20 @@ export {
   getDiscoveryParams,
   defaultTarget,
   bfsOrder,
+  PLAN_LIMITS,
+  CURRENT_PLAN_VERSIONS,
   CONTACT_FIELDS,
   exposedCompositionIds,
   MCP_TOOL_TIERS,
   MCP_TOOL_TOOLSETS,
   MCP_TOOL_SECURITY,
   MCP_ANON_PUBLISH_GATE,
-  FULL_CAPS,
-  capsFromToolsets,
   callApi,
+  recoveryHint,
   errorResult,
   isAnonymousAccountRequired,
   authChallengeMeta,
   textResult,
-  structuredResult,
-  getSessionContextWithAuth,
-  getSessionContext
+  structuredResult
 };
-//# sourceMappingURL=chunk-SEZ37YSH.js.map
+//# sourceMappingURL=chunk-SHTP4AJC.js.map