@clipform/mcp-server 4.2.1 → 4.2.3

package/dist/api-client.d.ts

@@ -42,18 +42,6 @@ declare function isAnonymousAccountRequired(result: {
     code?: string;
     reason?: string;
 }): boolean;
-/**
- * Builds the `_meta["mcp/www_authenticate"]` array a tool result carries to
- * trigger the Apps SDK's tool-level OAuth escalation (#4088): an array of
- * RFC 6750 Bearer challenge strings, the runtime half of the two-part
- * contract (the other half is the static MCP_TOOL_SECURITY declaration) -
- * per the Apps SDK auth docs, metadata alone never triggers the flow,
- * only a runtime error carrying this `_meta` key does. Same challenge shape
- * `apps/api/src/mcp/handler.ts` already emits as a real `WWW-Authenticate`
- * HTTP header for a bad/missing Bearer - this is the tool-result equivalent
- * for a caller that reached a tool (anonymously) but hit a feature that
- * requires an account.
- */
 declare function authChallengeMeta(errorCode: string, description: string, resourceMetadata?: string): Record<string, unknown>;
 declare function textResult(text: string): {
     content: {

package/dist/api-client.js

@@ -6,7 +6,7 @@ import {
   recoveryHint,
   structuredResult,
   textResult
-} from "./chunk-GZZGKW5A.js";
+} from "./chunk-ZRBMT7BF.js";
 import "./chunk-VPF6MLKM.js";
 import "./chunk-PBQ5BQWD.js";
 import "./chunk-PZ5AY32C.js";

package/dist/{chunk-O4LOUBGW.js → chunk-E7C34M2J.js}

@@ -2,7 +2,7 @@ import {
   CURRENT_PLAN_VERSIONS,
   PLAN_LIMITS,
   callApi
-} from "./chunk-GZZGKW5A.js";
+} from "./chunk-ZRBMT7BF.js";
 import {
   getMcpAuth
 } from "./chunk-VPF6MLKM.js";
@@ -22,6 +22,13 @@ var ANON_PREVIEW_NOTICE = "Preview accounts are temporary - claim yours to keep
 function anonPreviewNotice() {
   return getMcpAuth()?.is_anonymous ? ANON_PREVIEW_NOTICE : null;
 }
+var ANON_PREVIEW_LINK_LABEL = "Preview (answers not saved)";
+var ANON_PREVIEW_ONLY_NOTICE = 'The form is ready as a preview. To go live, say "publish it" - that prompts sign-in and keeps this chat connected to your account. In the preview, answers are not saved: do not share the preview link with respondents.';
+var PREVIEW_URL_DESCRIPTION = "Private preview of the form. Answers are not saved, so do not share it with respondents.";
+var CLAIM_URL_DESCRIPTION = "One-time link to sign up, keep this form and publish it.";
+function isPreviewViewerUrl(url) {
+  return typeof url === "string" && url.includes("mode=preview");
+}
 
 // src/lib/session-context.ts
 async function getSessionContextWithAuth() {
@@ -96,7 +103,12 @@ export {
   capsFromToolsets,
   ANON_PREVIEW_NOTICE,
   anonPreviewNotice,
+  ANON_PREVIEW_LINK_LABEL,
+  ANON_PREVIEW_ONLY_NOTICE,
+  PREVIEW_URL_DESCRIPTION,
+  CLAIM_URL_DESCRIPTION,
+  isPreviewViewerUrl,
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-O4LOUBGW.js.map
+//# sourceMappingURL=chunk-E7C34M2J.js.map

package/dist/chunk-E7C34M2J.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/caps.ts","../src/lib/anon-notice.ts","../src/lib/session-context.ts"],"sourcesContent":["import type { McpToolset } from \"@vid-master/config\";\n\n/**\n * What a connected surface can actually do, derived from the connect-time\n * toolset filter (#3309) so the guidance layers (server instructions, prompt\n * recipes, `clipform_get_workflow`, craft guides) never reference a tool the\n * surface doesn't register (#3681).\n *\n * The Claude Connectors Directory surface (`mcp.clipform.io/forms`) is\n * account + forms only: no media generation and no research helpers. A\n * workflow that still says \"call clipform_generate_tts\" there sends the model\n * at a tool that doesn't exist, which shows up in review as failed tool\n * calls. Every guidance producer takes a ServerCaps and gates on it.\n */\nexport interface ServerCaps {\n  /** Narration, video, image, music, render, and asset tools are registered. */\n  media: boolean;\n  /** News lookup and the generation audit log are registered. */\n  research: boolean;\n}\n\n/** Every toolset registered - stdio/npx and the bare remote endpoint. */\nexport const FULL_CAPS: ServerCaps = Object.freeze({ media: true, research: true });\n\nexport function capsFromToolsets(toolsets?: readonly McpToolset[]): ServerCaps {\n  if (toolsets === undefined) return FULL_CAPS;\n  return {\n    media: toolsets.includes(\"media\"),\n    research: toolsets.includes(\"research\"),\n  };\n}\n","import { getMcpAuth } from \"./auth-context.js\";\n\n/**\n * #4650: anonymous (preview) accounts are temporary. Date-free by design -\n * the purge is not enforced yet, so no expiry date or day count is promised\n * (exact dates are follow-up #4662). Defined once; every anonymous-lane\n * surface (create/update_form text, whoami, session resource) reuses it.\n */\nexport const ANON_PREVIEW_NOTICE =\n  \"Preview accounts are temporary - claim yours to keep your forms.\";\n\n/** The notice for an anonymous MCP caller, or null for everyone else. */\nexport function anonPreviewNotice(): string | null {\n  return getMcpAuth()?.is_anonymous ? ANON_PREVIEW_NOTICE : null;\n}\n\n/**\n * #4845: an anonymous build's link is a private preview, never a respondent\n * link (answers are not saved). Wording defined once; create_form, get_form,\n * the format-form link label and the output-schema descriptions all reuse it.\n */\nexport const ANON_PREVIEW_LINK_LABEL = \"Preview (answers not saved)\";\n\nexport const ANON_PREVIEW_ONLY_NOTICE =\n  'The form is ready as a preview. To go live, say \"publish it\" - that prompts sign-in and keeps this chat connected to your account. In the preview, answers are not saved: do not share the preview link with respondents.';\n\nexport const PREVIEW_URL_DESCRIPTION =\n  \"Private preview of the form. Answers are not saved, so do not share it with respondents.\";\n\nexport const CLAIM_URL_DESCRIPTION =\n  \"One-time link to sign up, keep this form and publish it.\";\n\n/** True for a viewer link in preview mode (an anonymous caller's draft). */\nexport function isPreviewViewerUrl(url: unknown): boolean {\n  return typeof url === \"string\" && url.includes(\"mode=preview\");\n}\n","import { BUSINESS, PLAN_LIMITS, CURRENT_PLAN_VERSIONS } from \"@vid-master/config\";\nimport { callApi } from \"./api-client.js\";\nimport { ANON_PREVIEW_NOTICE } from \"./anon-notice.js\";\nimport { getMcpAuth } from \"./auth-context.js\";\n\nexport type AuthMode = \"authenticated\" | \"anonymous\";\n\nexport interface SessionContextResult {\n  text: string;\n  authMode: AuthMode;\n}\n\nexport async function getSessionContextWithAuth(): Promise<SessionContextResult> {\n  let me: any;\n  const authCtx = getMcpAuth();\n  if (authCtx?.loadInternalContent && !authCtx.api_key) {\n    // #4657: the no-workspace anon lane (get_workflow with no mint) has no\n    // workspace for /me to describe, so plan caps default to Free.\n    const free = PLAN_LIMITS[CURRENT_PLAN_VERSIONS[0]];\n    me = {\n      auth_mode: \"anonymous\",\n      plan: {\n        name: free.name,\n        tier: free.tier,\n        node_limit: free.node_limit,\n        form_limit: free.form_limit ?? null,\n        custom_theme: free.custom_theme,\n      },\n    };\n  } else {\n    let result;\n    try {\n      result = await callApi(\"/me\", { method: \"GET\" });\n    } catch {\n      return { text: \"\", authMode: \"anonymous\" };\n    }\n    if (!result.ok) return { text: \"\", authMode: \"anonymous\" };\n    me = result.data as any;\n  }\n  // The API's auth_mode is \"api_key\" | \"oauth\" | \"session\" | \"anonymous\".\n  // Anything credentialed counts as authenticated - the old `=== \"oauth\"`\n  // check matched nothing the API returns, so API-key sessions were labelled\n  // anonymous with a \"sign in to unlock\" nudge right next to their real\n  // plan (#412 F6).\n  // The anon MCP lane runs as a minted bot key (/me says \"api_key\"), so the\n  // auth context is the truth for anonymous (#4653).\n  const apiAuthMode: string = getMcpAuth()?.is_anonymous\n    ? \"anonymous\"\n    : ((me.auth_mode as string) ?? \"anonymous\");\n  const authMode: AuthMode = apiAuthMode === \"anonymous\" ? \"anonymous\" : \"authenticated\";\n  const plan = me.plan;\n  const lines: string[] = [];\n\n  lines.push(\"## Your Session\");\n  if (authMode === \"authenticated\") {\n    lines.push(\n      apiAuthMode === \"api_key\"\n        ? \"Auth: API key (workspace-scoped)\"\n        : \"Auth: signed in (connected to a Clipform account)\"\n    );\n    // Workspace NAME only - the workspace UUID and the raw user_id/company_id\n    // are internal database identifiers the model never needs (response\n    // hygiene / disclosure guard, #2976).\n    lines.push(`Workspace: ${me.workspace?.name ?? \"Unknown\"}`);\n  } else {\n    lines.push(\"Auth: anonymous (not connected to a Clipform account)\");\n    if (me.workspace) {\n      lines.push(`Workspace: ${me.workspace.name}`);\n    }\n  }\n  lines.push(`Plan: ${plan.name} (tier ${plan.tier})`);\n  if (plan.node_limit !== null) {\n    lines.push(`Question limit: ${plan.node_limit} per form`);\n  } else {\n    lines.push(\"Questions: unlimited\");\n  }\n  if (plan.form_limit !== null) {\n    lines.push(`Form limit: ${plan.form_limit} forms`);\n  } else {\n    lines.push(\"Forms: unlimited\");\n  }\n  if (plan.custom_theme === false) {\n    lines.push(\"Custom themes: not available on this plan\");\n  }\n  if (authMode === \"anonymous\") {\n    // Neutral statement of fact, no upsell/CTA copy (commerce sweep, #2976):\n    // an anonymous session's forms are not tied to an account until one signs in.\n    lines.push(`\\nAnonymous session: forms are not tied to a Clipform account until you sign in.`);\n    lines.push(ANON_PREVIEW_NOTICE);\n  }\n\n  return { text: lines.join(\"\\n\"), authMode };\n}\n\nexport async function getSessionContext(): Promise<string> {\n  const { text } = await getSessionContextWithAuth();\n  return text;\n}\n"],"mappings":";;;;;;;;;;AAsBO,IAAM,YAAwB,OAAO,OAAO,EAAE,OAAO,MAAM,UAAU,KAAK,CAAC;AAE3E,SAAS,iBAAiB,UAA8C;AAC7E,MAAI,aAAa,OAAW,QAAO;AACnC,SAAO;AAAA,IACL,OAAO,SAAS,SAAS,OAAO;AAAA,IAChC,UAAU,SAAS,SAAS,UAAU;AAAA,EACxC;AACF;;;ACtBO,IAAM,sBACX;AAGK,SAAS,oBAAmC;AACjD,SAAO,WAAW,GAAG,eAAe,sBAAsB;AAC5D;AAOO,IAAM,0BAA0B;AAEhC,IAAM,2BACX;AAEK,IAAM,0BACX;AAEK,IAAM,wBACX;AAGK,SAAS,mBAAmB,KAAuB;AACxD,SAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,cAAc;AAC/D;;;ACvBA,eAAsB,4BAA2D;AAC/E,MAAI;AACJ,QAAM,UAAU,WAAW;AAC3B,MAAI,SAAS,uBAAuB,CAAC,QAAQ,SAAS;AAGpD,UAAM,OAAO,YAAY,sBAAsB,CAAC,CAAC;AACjD,SAAK;AAAA,MACH,WAAW;AAAA,MACX,MAAM;AAAA,QACJ,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK,cAAc;AAAA,QAC/B,cAAc,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF,OAAO;AACL,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,CAAC;AAAA,IACjD,QAAQ;AACN,aAAO,EAAE,MAAM,IAAI,UAAU,YAAY;AAAA,IAC3C;AACA,QAAI,CAAC,OAAO,GAAI,QAAO,EAAE,MAAM,IAAI,UAAU,YAAY;AACzD,SAAK,OAAO;AAAA,EACd;AAQA,QAAM,cAAsB,WAAW,GAAG,eACtC,cACE,GAAG,aAAwB;AACjC,QAAM,WAAqB,gBAAgB,cAAc,cAAc;AACvE,QAAM,OAAO,GAAG;AAChB,QAAM,QAAkB,CAAC;AAEzB,QAAM,KAAK,iBAAiB;AAC5B,MAAI,aAAa,iBAAiB;AAChC,UAAM;AAAA,MACJ,gBAAgB,YACZ,qCACA;AAAA,IACN;AAIA,UAAM,KAAK,cAAc,GAAG,WAAW,QAAQ,SAAS,EAAE;AAAA,EAC5D,OAAO;AACL,UAAM,KAAK,uDAAuD;AAClE,QAAI,GAAG,WAAW;AAChB,YAAM,KAAK,cAAc,GAAG,UAAU,IAAI,EAAE;AAAA,IAC9C;AAAA,EACF;AACA,QAAM,KAAK,SAAS,KAAK,IAAI,UAAU,KAAK,IAAI,GAAG;AACnD,MAAI,KAAK,eAAe,MAAM;AAC5B,UAAM,KAAK,mBAAmB,KAAK,UAAU,WAAW;AAAA,EAC1D,OAAO;AACL,UAAM,KAAK,sBAAsB;AAAA,EACnC;AACA,MAAI,KAAK,eAAe,MAAM;AAC5B,UAAM,KAAK,eAAe,KAAK,UAAU,QAAQ;AAAA,EACnD,OAAO;AACL,UAAM,KAAK,kBAAkB;AAAA,EAC/B;AACA,MAAI,KAAK,iBAAiB,OAAO;AAC/B,UAAM,KAAK,2CAA2C;AAAA,EACxD;AACA,MAAI,aAAa,aAAa;AAG5B,UAAM,KAAK;AAAA,+EAAkF;AAC7F,UAAM,KAAK,mBAAmB;AAAA,EAChC;AAEA,SAAO,EAAE,MAAM,MAAM,KAAK,IAAI,GAAG,SAAS;AAC5C;AAEA,eAAsB,oBAAqC;AACzD,QAAM,EAAE,KAAK,IAAI,MAAM,0BAA0B;AACjD,SAAO;AACT;","names":[]}

package/dist/{chunk-RKMGVU57.js → chunk-MO3ABORB.js}

@@ -1,13 +1,13 @@
 import {
   FULL_CAPS,
   getSessionContext
-} from "./chunk-O4LOUBGW.js";
+} from "./chunk-E7C34M2J.js";
 import {
   ALL_VARIANTS,
   FORM_TYPES,
   FORM_TYPE_KEYS,
   callApi
-} from "./chunk-GZZGKW5A.js";
+} from "./chunk-ZRBMT7BF.js";
 import {
   getMcpAuth
 } from "./chunk-VPF6MLKM.js";
@@ -155,4 +155,4 @@ export {
   getGuideUri,
   registerResources
 };
-//# sourceMappingURL=chunk-RKMGVU57.js.map
+//# sourceMappingURL=chunk-MO3ABORB.js.map

package/dist/{chunk-QG354AVT.js → chunk-UYJLVVM3.js}

@@ -1,11 +1,11 @@
 import {
   FULL_CAPS,
   getSessionContextWithAuth
-} from "./chunk-O4LOUBGW.js";
+} from "./chunk-E7C34M2J.js";
 import {
   WORKFLOW_TYPES,
   getDiscoveryParams
-} from "./chunk-GZZGKW5A.js";
+} from "./chunk-ZRBMT7BF.js";
 import {
   __export
 } from "./chunk-PZ5AY32C.js";
@@ -14633,10 +14633,10 @@ var quizWorkflow = (args, sessionContext, authMode, caps) => {
      - title and message that fit the quiz's voice - short, punchy, and specific to the topic (not generic "Good job!"). Example: title: "Well played!", message: "Share your score and challenge a friend."
      - NOTE: Personalised messages per score tier (score_ranges) are coming soon. For now, write one great end screen message that works for all scores.
    ${TAGS_LINE}`,
-    caps.media && "**Generate narration** with clipform_generate_tts - batch ALL questions in a single call (pass an array of items). Tease the question - do NOT reveal the answer or read options aloud. Keep each narration 5-15 seconds.",
+    caps.media && "**Generate narration** with clipform_generate_tts - batch ALL questions in a single call (pass an array of items). Narration asks the full question in natural words so the clip stands alone (never a verbatim read of the prompt, never the answer); the on-screen prompt is then a short reminder. Without narration, the prompt carries the full question.",
     caps.media && `**Build video** for each question - pass each question's node_id (and form_id) on the render call so it attaches automatically once done. Pick per question; mixing treatments across one quiz is fine:
    - Default - narrated slideshow: clipform_search_media (kind: "image", 3 images per question, batch all queries in one call), then clipform_render_video_template (template: "slideshow", controls.items + controls.audio_url) with wait: false per question - fires all renders in parallel - then collect URLs with clipform_check_render.
-   - Designed visual - when a recipe or composition fits the question or the user asks for one (e.g. a versus, a grid reveal, guess-the-city): recipe book first - clipform_list_video_templates and match the mechanic to a recipe, then clipform_render_video_template with its curated controls (wait: false, one call per question). Only if no recipe fits, drop to the raw primitives - clipform_list_compositions, then ONE clipform_render_composition call with items (all clips render in parallel). Collect job_ids with clipform_check_render. Both take narration via sound.narration.`,
+   - Designed visual - when a recipe or composition fits the question or the user asks for one (e.g. a versus, a grid reveal, guess-the-city): recipe book first - clipform_list_video_templates and match the mechanic to a recipe, then clipform_render_video_template with its curated controls (wait: false, one call per question). Only if no recipe fits, drop to the raw primitives - clipform_list_compositions, then ONE clipform_render_composition call with items (all clips render in parallel). Collect job_ids with clipform_check_render. Recipes take the narration as audio_url (the clip sizes to it); raw compositions take it as sound.narration. Never pass a duration.`,
     caps.media && ATTACH_MEDIA_STEP,
     REPUBLISH_STEP,
     caps.research && `${LOG_STEP} (sources, images, attributions)`
@@ -14755,7 +14755,7 @@ Build a standard scored quiz${topic} instead: call clipform_get_workflow with ty
      - Optional reveal beat (type: "button"): add one only when the quiz wants extra context or celebration - the answer in the prompt ("It was Japan!"), config { button_text: "Next one" }
    - Final end_screen node: show_score: true, icon: "trophy", show_share_button: true, cta_type: "restart", cta_text: a short challenge. NOTE: per-tier messages (score_ranges) are coming soon - write one great message.
    - tags: format "quiz", genre "trivia", and 2-3 topic words`,
-    "**Generate narration** with clipform_generate_tts - batch ALL items in one call. The visual does the teasing: set stakes, never describe what's on screen or read the clue aloud. If a question uses the optional reveal node, its narration can celebrate.",
+    "**Generate narration** with clipform_generate_tts - batch ALL items in one call. Narration asks the full question so the clip stands alone (compare mechanics name both sides; decode mechanics like flag or rebus ask the question but never decode the clue) and never describes what's on screen. An optional reveal node's narration gives the answer plus one surprising fact.",
     `${ATTACH_MEDIA_STEP} Attach the clue clip to each choice node; attach reveal clips to their button nodes only on questions that use one.`,
     REPUBLISH_STEP,
     caps.research && `${LOG_STEP} - record the composition IDs used per question alongside sources and attributions`
@@ -15224,4 +15224,4 @@ export {
   getWorkflowText,
   registerPrompts
 };
-//# sourceMappingURL=chunk-QG354AVT.js.map
+//# sourceMappingURL=chunk-UYJLVVM3.js.map