@clipform/mcp-server 3.3.2 → 3.7.1

package/README.md

@@ -44,17 +44,13 @@ claude mcp add clipform -e CLIPFORM_API_KEY=cf_xxx -- npx -y @clipform/mcp-serve
 }
 ```
 
-Self-service API key generation is coming soon. For now, your API key is provided during onboarding or via your account settings - contact support if you need one.
-
-You can also pass the key as a CLI flag: `npx -y @clipform/mcp-server --api-key=cf_xxx`
-
-**Anonymous mode** (no API key): Forms go into a shared workspace with the free-tier 3-node limit. You'll get a claim URL to move forms into your account.
+Generate an API key in your Clipform dashboard under **Developers > API keys**. The local server always needs one - to try Clipform without an account, connect to `https://mcp.clipform.io` instead (see "How it works").
 
 ### Environment variables
 
 | Variable | Required | Purpose |
 |----------|----------|---------|
-| `CLIPFORM_API_KEY` | For workspace auth | Bearer key - forms land in the key's workspace with its plan limits. Also unlocks the creative tools (search, TTS, video rendering). Omit for anonymous mode. |
+| `CLIPFORM_API_KEY` | For workspace auth | Bearer key - forms land in the key's workspace with its plan limits. Also unlocks the creative tools (search, TTS, video rendering). Required by the local server. |
 | `API_URL` | Yes | Clipform API base URL (`https://api.clipform.io`, or your local/self-hosted API). |
 
 ## Tools
@@ -106,7 +102,9 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 
 **Local with API key:** The `CLIPFORM_API_KEY` is sent as a standard `Authorization: Bearer` header. Forms are created directly in the key's workspace with your plan tier limits.
 
-**Local anonymous (no key):** Forms go into a shared unclaimed workspace. No auth is needed to edit them - the form UUID is the only credential. You'll get a claim URL to transfer ownership. Free-tier 3-node limit applies.
+**Remote anonymous (no sign-in):** Connecting to `https://mcp.clipform.io` without signing in builds into a temporary account of the session's own. Forms stay drafts with a private preview link - nothing goes live - and while unclaimed, the form UUID is the credential to edit it. Build results include a one-time claim URL that signs you into that account (on the first form, periodically after, and at the form limit); free-plan limits apply. The local stdio server always needs `CLIPFORM_API_KEY`.
+
+These tools need a signed-in Clipform account (OAuth, or an API key): `clipform_list_forms`, `clipform_whoami`, `clipform_get_results`, `clipform_get_responses`, `clipform_delete_form`. An anonymous remote session that calls one is asked to sign in instead. Everything else, including `clipform_get_guide`, `clipform_get_workflow` and `clipform_list_assets`, works without an account.
 
 Forms are created with a start node and end screen automatically - you just add the nodes in between.
 

package/README.template.md

@@ -50,17 +50,13 @@ claude mcp add clipform -e CLIPFORM_API_KEY=cf_xxx -- npx -y {{PKG}}
 }
 ```
 
-Self-service API key generation is coming soon. For now, your API key is provided during onboarding or via your account settings - contact support if you need one.
-
-You can also pass the key as a CLI flag: `npx -y {{PKG}} --api-key=cf_xxx`
-
-**Anonymous mode** (no API key): Forms go into a shared workspace with the free-tier 3-node limit. You'll get a claim URL to move forms into your account.
+Generate an API key in your Clipform dashboard under **Developers > API keys**. The local server always needs one - to try Clipform without an account, connect to `{{MCP_URL}}` instead (see "How it works").
 
 ### Environment variables
 
 | Variable | Required | Purpose |
 |----------|----------|---------|
-| `CLIPFORM_API_KEY` | For workspace auth | Bearer key - forms land in the key's workspace with its plan limits. Also unlocks the creative tools (search, TTS, video rendering). Omit for anonymous mode. |
+| `CLIPFORM_API_KEY` | For workspace auth | Bearer key - forms land in the key's workspace with its plan limits. Also unlocks the creative tools (search, TTS, video rendering). Required by the local server. |
 | `API_URL` | Yes | Clipform API base URL (`{{API_URL}}`, or your local/self-hosted API). |
 
 ## Tools
@@ -79,7 +75,9 @@ Your MCP client lists these automatically on connect (via `tools/list`). Full re
 
 **Local with API key:** The `CLIPFORM_API_KEY` is sent as a standard `Authorization: Bearer` header. Forms are created directly in the key's workspace with your plan tier limits.
 
-**Local anonymous (no key):** Forms go into a shared unclaimed workspace. No auth is needed to edit them - the form UUID is the only credential. You'll get a claim URL to transfer ownership. Free-tier 3-node limit applies.
+**Remote anonymous (no sign-in):** Connecting to `{{MCP_URL}}` without signing in builds into a temporary account of the session's own. Forms stay drafts with a private preview link - nothing goes live - and while unclaimed, the form UUID is the credential to edit it. Build results include a one-time claim URL that signs you into that account (on the first form, periodically after, and at the form limit); free-plan limits apply. The local stdio server always needs `CLIPFORM_API_KEY`.
+
+These tools need a signed-in Clipform account (OAuth, or an API key): `clipform_list_forms`, `clipform_whoami`, `clipform_get_results`, `clipform_get_responses`, `clipform_delete_form`. An anonymous remote session that calls one is asked to sign in instead. Everything else, including `clipform_get_guide`, `clipform_get_workflow` and `clipform_list_assets`, works without an account.
 
 Forms are created with a start node and end screen automatically - you just add the nodes in between.
 

package/dist/api-client.d.ts

@@ -0,0 +1,78 @@
+interface ApiOptions {
+    method?: string;
+    body?: Record<string, unknown>;
+    params?: Record<string, string>;
+    timeoutMs?: number;
+}
+type ApiResult = {
+    ok: true;
+    data: Record<string, unknown>;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+    apiMessage?: string;
+    code?: string;
+    reason?: string;
+};
+declare function callApi(path: string, options?: ApiOptions): Promise<ApiResult>;
+/** Next-step hint by status + path so an agent can recover instead of
+ *  retrying blind (#651). The raw API message stays first, hint second. */
+declare function recoveryHint(status: number, path: string, reason?: string): string | undefined;
+declare function errorResult(message: string, meta?: Record<string, unknown>): {
+    _meta?: Record<string, unknown> | undefined;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};
+/**
+ * True exactly when a callApi failure is the `assertNotAnonymous` account
+ * gate (apps/api/src/lib/anonymous-guard.ts) - triple-keyed on status + code
+ * + reason so an ordinary 403 (PLAN_LIMIT, a genuine authorization denial, a
+ * 500) never escalates an already-logged-in caller into a pointless OAuth
+ * re-auth (#4088 over-escalation guard). The only MCP-reachable trigger
+ * today is `clipform_update_form`'s `is_live: true` (publish) - see that
+ * tool's own comment for why `clipform_create_form`'s use of this same
+ * predicate is currently dead code.
+ */
+declare function isAnonymousAccountRequired(result: {
+    status: number;
+    code?: string;
+    reason?: string;
+}): boolean;
+/**
+ * Builds the `_meta["mcp/www_authenticate"]` array a tool result carries to
+ * trigger the Apps SDK's tool-level OAuth escalation (#4088): an array of
+ * RFC 6750 Bearer challenge strings, the runtime half of the two-part
+ * contract (the other half is the static MCP_TOOL_SECURITY declaration) -
+ * per the Apps SDK auth docs, metadata alone never triggers the flow,
+ * only a runtime error carrying this `_meta` key does. Same challenge shape
+ * `apps/api/src/mcp/handler.ts` already emits as a real `WWW-Authenticate`
+ * HTTP header for a bad/missing Bearer - this is the tool-result equivalent
+ * for a caller that reached a tool (anonymously) but hit a feature that
+ * requires an account.
+ */
+declare function authChallengeMeta(errorCode: string, description: string, resourceMetadata?: string): Record<string, unknown>;
+declare function textResult(text: string): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+/** Like textResult, but also carries a machine-readable `structuredContent`.
+ *  A tool that declares an `outputSchema` MUST return `structuredContent` on
+ *  every non-error result (the MCP SDK validates it and throws otherwise) - use
+ *  this for every success/empty path, and `errorResult` (exempt) for failures.
+ *  Project to the schema's explicit field set here - never pass raw API rows
+ *  (response-hygiene invariant, #797). */
+declare function structuredResult(text: string, structuredContent: Record<string, unknown>): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    structuredContent: Record<string, unknown>;
+};
+
+export { authChallengeMeta, callApi, errorResult, isAnonymousAccountRequired, recoveryHint, structuredResult, textResult };

package/dist/api-client.js

@@ -0,0 +1,22 @@
+import {
+  authChallengeMeta,
+  callApi,
+  errorResult,
+  isAnonymousAccountRequired,
+  recoveryHint,
+  structuredResult,
+  textResult
+} from "./chunk-SHTP4AJC.js";
+import "./chunk-VPF6MLKM.js";
+import "./chunk-PBQ5BQWD.js";
+import "./chunk-G3PMV62Z.js";
+export {
+  authChallengeMeta,
+  callApi,
+  errorResult,
+  isAnonymousAccountRequired,
+  recoveryHint,
+  structuredResult,
+  textResult
+};
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/auth-context.d.ts

@@ -17,6 +17,7 @@ interface McpAuthContext {
     is_anonymous?: boolean;
     auth_via?: "oauth";
     mcp_mint_proof?: string;
+    mcp_session_proof?: string;
     resolveWorkspace?: (target: {
         workspace_id?: string;
         form_id?: string;
@@ -30,6 +31,10 @@ interface McpAuthContext {
         name: string;
     }[]>;
     default_workspace_id?: string;
+    mcp_session_id?: string;
+    loadInternalContent?: (kind: "guides" | "assets", params?: {
+        type?: string;
+    }) => Promise<Record<string, unknown>>;
 }
 /**
  * Marker header the in-process MCP tool layer sets on its outgoing API
@@ -65,8 +70,12 @@ declare const MCP_AUTH_VIA_HEADER = "x-clipform-auth-via";
  * victim's uid themselves (#3330 review).
  */
 declare const MCP_MINT_PROOF_HEADER = "x-clipform-mcp-mint-proof";
+/** #4090: carries `mcp_session_proof` (same trust model as MCP_MINT_PROOF_HEADER: HMAC-verified server-side, never trusted raw). */
+declare const MCP_SESSION_PROOF_HEADER = "x-clipform-mcp-session-proof";
+/** Carries `mcp_session_id` to the API for funnel analytics only (#4657). */
+declare const MCP_SESSION_ID_HEADER = "x-clipform-mcp-session-id";
 declare function runWithMcpAuth<T>(ctx: McpAuthContext, fn: () => Promise<T> | T): Promise<T> | T;
 declare function getMcpAuth(): McpAuthContext | undefined;
 declare function runWithMcpTool<T>(toolName: string, fn: () => Promise<T> | T): Promise<T> | T;
 
-export { MCP_ANONYMOUS_HEADER, MCP_AUTH_VIA_HEADER, MCP_MINT_PROOF_HEADER, type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };
+export { MCP_ANONYMOUS_HEADER, MCP_AUTH_VIA_HEADER, MCP_MINT_PROOF_HEADER, MCP_SESSION_ID_HEADER, MCP_SESSION_PROOF_HEADER, type McpAuthContext, getMcpAuth, runWithMcpAuth, runWithMcpTool };

package/dist/auth-context.js

@@ -2,15 +2,19 @@ import {
   MCP_ANONYMOUS_HEADER,
   MCP_AUTH_VIA_HEADER,
   MCP_MINT_PROOF_HEADER,
+  MCP_SESSION_ID_HEADER,
+  MCP_SESSION_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool
-} from "./chunk-A5CFGL27.js";
+} from "./chunk-VPF6MLKM.js";
 import "./chunk-G3PMV62Z.js";
 export {
   MCP_ANONYMOUS_HEADER,
   MCP_AUTH_VIA_HEADER,
   MCP_MINT_PROOF_HEADER,
+  MCP_SESSION_ID_HEADER,
+  MCP_SESSION_PROOF_HEADER,
   getMcpAuth,
   runWithMcpAuth,
   runWithMcpTool

package/dist/{chunk-KHRY3A3M.js → chunk-5SCRFNYJ.js}

@@ -1,20 +1,32 @@
+import {
+  FULL_CAPS,
+  getSessionContext
+} from "./chunk-YOVLSXPW.js";
 import {
   ALL_VARIANTS,
   FORM_TYPES,
   FORM_TYPE_KEYS,
-  FULL_CAPS,
-  callApi,
-  getSessionContext
-} from "./chunk-65MTGAFF.js";
+  callApi
+} from "./chunk-SHTP4AJC.js";
+import {
+  getMcpAuth
+} from "./chunk-VPF6MLKM.js";
 
 // src/lib/guides.ts
 var guidesPromise = null;
 async function loadGuides() {
-  const result = await callApi("/internal/mcp/guides", { method: "GET" });
-  if (!result.ok) {
-    throw new Error(`Failed to load guides: ${result.error}`);
+  const loader = getMcpAuth()?.loadInternalContent;
+  let data;
+  if (loader) {
+    data = await loader("guides");
+  } else {
+    const result = await callApi("/internal/mcp/guides", { method: "GET" });
+    if (!result.ok) {
+      throw new Error(`Failed to load guides: ${result.error}`);
+    }
+    data = result.data;
   }
-  const guides = result.data.guides ?? [];
+  const guides = data.guides ?? [];
   return new Map(guides.map((g) => [g.uri, g]));
 }
 async function fetchGuideText(uri) {
@@ -143,4 +155,4 @@ export {
   getGuideUri,
   registerResources
 };
-//# sourceMappingURL=chunk-KHRY3A3M.js.map
+//# sourceMappingURL=chunk-5SCRFNYJ.js.map

package/dist/chunk-5SCRFNYJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/guides.ts","../src/resources.ts"],"sourcesContent":["import { callApi } from \"./api-client.js\";\nimport { getMcpAuth } from \"./auth-context.js\";\nimport type { ServerCaps } from \"./caps.js\";\n\n/**\n * Craft guide bodies live server-side (#470) - the npm package is a shim\n * that fetches them at runtime instead of bundling them in the tarball.\n * One fetch per process (all ~30KB of guides in a single response), cached;\n * a failed fetch is NOT cached so the next read retries.\n */\n\nexport interface RemoteGuide {\n  type: string;\n  variant: string | null;\n  uri: string;\n  mimeType: string;\n  text: string;\n}\n\nlet guidesPromise: Promise<Map<string, RemoteGuide>> | null = null;\n\nasync function loadGuides(): Promise<Map<string, RemoteGuide>> {\n  // #4657: the anonymous no-workspace lane serves the static guides in-process.\n  const loader = getMcpAuth()?.loadInternalContent;\n  let data: Record<string, unknown>;\n  if (loader) {\n    data = await loader(\"guides\");\n  } else {\n    const result = await callApi(\"/internal/mcp/guides\", { method: \"GET\" });\n    if (!result.ok) {\n      throw new Error(`Failed to load guides: ${result.error}`);\n    }\n    data = result.data;\n  }\n  const guides = (data as { guides?: RemoteGuide[] }).guides ?? [];\n  return new Map(guides.map((g) => [g.uri, g]));\n}\n\n/** Fetch a guide body by its clipform:// URI. Returns null when unavailable. */\nexport async function fetchGuideText(uri: string): Promise<string | null> {\n  if (!guidesPromise) {\n    guidesPromise = loadGuides();\n  }\n  try {\n    const guides = await guidesPromise;\n    return guides.get(uri)?.text ?? null;\n  } catch (err) {\n    guidesPromise = null; // don't cache failures - retry on the next read\n    // Loud, not silent: a misconfigured API_URL/key otherwise degrades every\n    // guide to the stub with nothing in the logs.\n    console.error(`[guides] Failed to fetch ${uri}: ${err instanceof Error ? err.message : String(err)}`);\n    return null;\n  }\n}\n\n/** Shown in place of a guide when the API is unreachable or unauthenticated. */\nexport function guideFallbackText(uri: string): string {\n  return [\n    `# Guide unavailable`,\n    ``,\n    `The craft guide (${uri}) could not be loaded from the Clipform API.`,\n    `Guides are served at runtime and need a reachable API with a valid key -`,\n    `check API_URL and CLIPFORM_API_KEY, then try again.`,\n    ``,\n    `General principles in the meantime: write narration for the ear (short,`,\n    `conversational), never reveal answers in narration or media, and keep`,\n    `forms tight - every question must earn its place.`,\n  ].join(\"\\n\");\n}\n\n/**\n * Craft guide bodies are written for the full tool surface and mention the\n * narration/video tools by name. On a surface that doesn't register them\n * (the Claude Connectors Directory resource, #3681) prefix the guide with a\n * note so the model doesn't chase tools it can't call. The body itself is\n * untouched - the craft (question design, pacing) is the same either way.\n */\nexport function applyCapsToGuide(text: string, caps: ServerCaps): string {\n  if (caps.media) return text;\n  return [\n    \"> **This connection exposes form-building tools only** - no narration, video, image, or music tools. Where this guide mentions narration, media, or rendering, skip that part and carry the same craft into the written question text.\",\n    \"\",\n    text,\n  ].join(\"\\n\");\n}\n","import { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { getSessionContext } from \"./lib/session-context.js\";\nimport { FORM_TYPE_KEYS, FORM_TYPES, ALL_VARIANTS } from \"@vid-master/config\";\n\nexport const GUIDE_TYPES = FORM_TYPE_KEYS as readonly string[] as readonly [string, ...string[]];\nexport type GuideType = (typeof FORM_TYPE_KEYS)[number];\n\nexport const QUIZ_VARIANTS = ALL_VARIANTS as readonly string[] as readonly [string, ...string[]];\nexport type QuizVariant = (typeof ALL_VARIANTS)[number];\n// Guide BODIES are not bundled here (#470): the npm tarball ships only this\n// registration metadata. Text is fetched from the API at runtime - see\n// lib/guides.ts (cached per process, stub fallback when unreachable).\nimport { fetchGuideText, guideFallbackText, applyCapsToGuide } from \"./lib/guides.js\";\nimport { FULL_CAPS, type ServerCaps } from \"./lib/caps.js\";\n\nconst GUIDE_DESCRIPTIONS: Record<GuideType, string> = {\n  \"quiz\": \"Craft knowledge for writing engaging quizzes - difficulty curves, question psychology, narration style, scoring\",\n  \"survey\": \"Craft knowledge for feedback surveys, NPS, and research forms - brevity, rating scales, respondent fatigue\",\n  \"interview\": \"Craft knowledge for building interview forms - warm-up pacing, open questions, consent, video responses\",\n  \"funnel\": \"Craft knowledge for lead qualification funnels - planned feature, conditional routing coming soon\",\n  \"testimonial\": \"Craft knowledge for collecting testimonials and customer stories on video - storytelling prompts, comfort techniques, consent\",\n  \"application\": \"Craft knowledge for application and evaluation forms - multi-section structure, video responses for behavioural questions, screening\",\n  \"booking\": \"Craft knowledge for event registration and booking forms - minimal friction, video welcome, confirmation flow\",\n};\n\n// Sourced from config (single source of truth) so the agent-facing resource\n// descriptions can't drift from FORM_TYPES.quiz.variant_descriptions (#2534,\n// the exact pair packages/config/CLAUDE.md warns about).\nconst QUIZ_VARIANT_DESCRIPTIONS = FORM_TYPES.quiz.variant_descriptions;\n\nexport function getGuideUri(type: GuideType, variant?: QuizVariant): string {\n  if (type === \"quiz\" && variant) {\n    return `clipform://guides/quiz/${variant}`;\n  }\n  return `clipform://guides/${type}`;\n}\n\nasync function readGuide(uri: string, caps: ServerCaps): Promise<string> {\n  return applyCapsToGuide((await fetchGuideText(uri)) ?? guideFallbackText(uri), caps);\n}\n\nexport function registerResources(server: McpServer, caps: ServerCaps = FULL_CAPS) {\n  for (const type of GUIDE_TYPES) {\n    server.registerResource(\n      `guide-${type}`,\n      getGuideUri(type),\n      {\n        description: GUIDE_DESCRIPTIONS[type],\n        mimeType: \"text/markdown\",\n        annotations: { audience: [\"assistant\" as const], priority: 0.8 },\n      },\n      async () => ({\n        contents: [{\n          uri: getGuideUri(type),\n          mimeType: \"text/markdown\",\n          text: await readGuide(getGuideUri(type), caps),\n        }],\n      }),\n    );\n  }\n\n  for (const variant of QUIZ_VARIANTS) {\n    server.registerResource(\n      `guide-quiz-${variant}`,\n      getGuideUri(\"quiz\", variant),\n      {\n        description: QUIZ_VARIANT_DESCRIPTIONS[variant],\n        mimeType: \"text/markdown\",\n        annotations: { audience: [\"assistant\" as const], priority: 0.8 },\n      },\n      async () => ({\n        contents: [{\n          uri: getGuideUri(\"quiz\", variant),\n          mimeType: \"text/markdown\",\n          text: await readGuide(getGuideUri(\"quiz\", variant), caps),\n        }],\n      }),\n    );\n  }\n\n  server.registerResource(\n    \"context-session\",\n    \"clipform://context/session\",\n    {\n      description:\n        \"Current session info: auth mode, workspace name, plan name, and node/form limits. Read this before planning content to know your constraints.\",\n      mimeType: \"text/markdown\",\n      annotations: { audience: [\"assistant\"], priority: 1.0 },\n    },\n    async () => {\n      const text = await getSessionContext();\n      return {\n        contents: [\n          {\n            uri: \"clipform://context/session\",\n            mimeType: \"text/markdown\",\n            text: text || \"Session context unavailable - API may not be reachable.\",\n          },\n        ],\n      };\n    }\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,IAAI,gBAA0D;AAE9D,eAAe,aAAgD;AAE7D,QAAM,SAAS,WAAW,GAAG;AAC7B,MAAI;AACJ,MAAI,QAAQ;AACV,WAAO,MAAM,OAAO,QAAQ;AAAA,EAC9B,OAAO;AACL,UAAM,SAAS,MAAM,QAAQ,wBAAwB,EAAE,QAAQ,MAAM,CAAC;AACtE,QAAI,CAAC,OAAO,IAAI;AACd,YAAM,IAAI,MAAM,0BAA0B,OAAO,KAAK,EAAE;AAAA,IAC1D;AACA,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,SAAU,KAAoC,UAAU,CAAC;AAC/D,SAAO,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9C;AAGA,eAAsB,eAAe,KAAqC;AACxE,MAAI,CAAC,eAAe;AAClB,oBAAgB,WAAW;AAAA,EAC7B;AACA,MAAI;AACF,UAAM,SAAS,MAAM;AACrB,WAAO,OAAO,IAAI,GAAG,GAAG,QAAQ;AAAA,EAClC,SAAS,KAAK;AACZ,oBAAgB;AAGhB,YAAQ,MAAM,4BAA4B,GAAG,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AACpG,WAAO;AAAA,EACT;AACF;AAGO,SAAS,kBAAkB,KAAqB;AACrD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,oBAAoB,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AASO,SAAS,iBAAiB,MAAc,MAA0B;AACvE,MAAI,KAAK,MAAO,QAAO;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;;;AChFO,IAAM,cAAc;AAGpB,IAAM,gBAAgB;AAQ7B,IAAM,qBAAgD;AAAA,EACpD,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU;AAAA,EACV,eAAe;AAAA,EACf,eAAe;AAAA,EACf,WAAW;AACb;AAKA,IAAM,4BAA4B,WAAW,KAAK;AAE3C,SAAS,YAAY,MAAiB,SAA+B;AAC1E,MAAI,SAAS,UAAU,SAAS;AAC9B,WAAO,0BAA0B,OAAO;AAAA,EAC1C;AACA,SAAO,qBAAqB,IAAI;AAClC;AAEA,eAAe,UAAU,KAAa,MAAmC;AACvE,SAAO,iBAAkB,MAAM,eAAe,GAAG,KAAM,kBAAkB,GAAG,GAAG,IAAI;AACrF;AAEO,SAAS,kBAAkB,QAAmB,OAAmB,WAAW;AACjF,aAAW,QAAQ,aAAa;AAC9B,WAAO;AAAA,MACL,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB;AAAA,QACE,aAAa,mBAAmB,IAAI;AAAA,QACpC,UAAU;AAAA,QACV,aAAa,EAAE,UAAU,CAAC,WAAoB,GAAG,UAAU,IAAI;AAAA,MACjE;AAAA,MACA,aAAa;AAAA,QACX,UAAU,CAAC;AAAA,UACT,KAAK,YAAY,IAAI;AAAA,UACrB,UAAU;AAAA,UACV,MAAM,MAAM,UAAU,YAAY,IAAI,GAAG,IAAI;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,aAAW,WAAW,eAAe;AACnC,WAAO;AAAA,MACL,cAAc,OAAO;AAAA,MACrB,YAAY,QAAQ,OAAO;AAAA,MAC3B;AAAA,QACE,aAAa,0BAA0B,OAAO;AAAA,QAC9C,UAAU;AAAA,QACV,aAAa,EAAE,UAAU,CAAC,WAAoB,GAAG,UAAU,IAAI;AAAA,MACjE;AAAA,MACA,aAAa;AAAA,QACX,UAAU,CAAC;AAAA,UACT,KAAK,YAAY,QAAQ,OAAO;AAAA,UAChC,UAAU;AAAA,UACV,MAAM,MAAM,UAAU,YAAY,QAAQ,OAAO,GAAG,IAAI;AAAA,QAC1D,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE,aACE;AAAA,MACF,UAAU;AAAA,MACV,aAAa,EAAE,UAAU,CAAC,WAAW,GAAG,UAAU,EAAI;AAAA,IACxD;AAAA,IACA,YAAY;AACV,YAAM,OAAO,MAAM,kBAAkB;AACrC,aAAO;AAAA,QACL,UAAU;AAAA,UACR;AAAA,YACE,KAAK;AAAA,YACL,UAAU;AAAA,YACV,MAAM,QAAQ;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-5J5N7KTW.js → chunk-GJ3XQSQY.js}

@@ -1,9 +1,11 @@
 import {
   FULL_CAPS,
-  WORKFLOW_TYPES,
-  getDiscoveryParams,
   getSessionContextWithAuth
-} from "./chunk-65MTGAFF.js";
+} from "./chunk-YOVLSXPW.js";
+import {
+  WORKFLOW_TYPES,
+  getDiscoveryParams
+} from "./chunk-SHTP4AJC.js";
 import {
   __export
 } from "./chunk-G3PMV62Z.js";
@@ -4856,4 +4858,4 @@ export {
   getWorkflowText,
   registerPrompts
 };
-//# sourceMappingURL=chunk-5J5N7KTW.js.map
+//# sourceMappingURL=chunk-GJ3XQSQY.js.map