@clipform/mcp-server 4.2.1 → 4.2.3

package/dist/{chunk-BKTCQ5HS.js → chunk-XFGQP52H.js}

@@ -29,7 +29,7 @@ import {
   union,
   unknown,
   url
-} from "./chunk-QG354AVT.js";
+} from "./chunk-UYJLVVM3.js";
 import {
   GUIDE_TYPES,
   QUIZ_VARIANTS,
@@ -38,13 +38,18 @@ import {
   getGuideUri,
   guideFallbackText,
   registerResources
-} from "./chunk-RKMGVU57.js";
+} from "./chunk-MO3ABORB.js";
 import {
+  ANON_PREVIEW_LINK_LABEL,
   ANON_PREVIEW_NOTICE,
+  ANON_PREVIEW_ONLY_NOTICE,
+  CLAIM_URL_DESCRIPTION,
   FULL_CAPS,
+  PREVIEW_URL_DESCRIPTION,
   anonPreviewNotice,
-  capsFromToolsets
-} from "./chunk-O4LOUBGW.js";
+  capsFromToolsets,
+  isPreviewViewerUrl
+} from "./chunk-E7C34M2J.js";
 import {
   ACTIVE_NODE_TYPES,
   CONTACT_FIELDS,
@@ -66,7 +71,7 @@ import {
   resolveFormType,
   structuredResult,
   textResult
-} from "./chunk-GZZGKW5A.js";
+} from "./chunk-ZRBMT7BF.js";
 import {
   getMcpAuth,
   runWithMcpAuth,
@@ -16314,7 +16319,7 @@ function registerCreateFormTool(server) {
     "clipform_create_form",
     {
       title: "Create Clipform",
-      description: `Create a new Clipform (interactive video-style form). Returns a viewer URL and form ID. When connected via an authenticated MCP client (e.g. claude.ai), the form lands directly in the user's workspace. Anonymous sessions build into a temporary account of their own: forms stay drafts with a private preview link. Some results also include a one-time claim URL that signs the user into that account; relay it when present.
+      description: `Create a new Clipform (interactive video-style form). Returns a viewer URL and form ID (an anonymous build's link is a private preview where answers are not saved). When connected via an authenticated MCP client (e.g. claude.ai), the form lands directly in the user's workspace. Anonymous sessions build into a temporary account of their own: forms stay drafts with a private preview link. Some results also include a one-time claim URL that signs the user into that account; relay it when present.
 
 ${ONBOARDING_OFFER_TOOL_CUE}
 
@@ -16344,12 +16349,20 @@ Example: A form that asks a question, collects contact info, then finishes:
       }),
       outputSchema: external_exports.object({
         form_id: external_exports.string().describe("Form UUID - pass to follow-up tools"),
-        // #3330: an anonymous session's viewer_url is a scoped preview link
-        // (only the caller can open it) until the account is claimed and the
-        // form is published - only an authenticated/claimed workspace's
-        // create returns a genuinely live URL here.
-        viewer_url: external_exports.string().describe("Form URL for respondents - a live public URL once authenticated/published, or a scoped preview-only link for an anonymous session"),
-        dashboard_url: external_exports.string().optional().describe("Builder URL (sign in to edit)"),
+        // #4845 expand/contract. The deployed ChatGPT schema is
+        // additionalProperties:false, so emitting a field it does not declare
+        // is invalid until the Rescan approves a schema that declares it.
+        // Order: (a) deploy the schema declaring preview_url / claim_url /
+        // is_preview as optional, emitting NOTHING new (this step);
+        // (b) Rescan; (c) once approved, emit them; (d) a later Rescan-approved
+        // CONTRACT step drops the anonymous viewer_url / dashboard_url
+        // duplicates. See SUBMISSION.md. Until (c), structuredContent stays
+        // key-for-key what origin/main emitted (approved-schema.test.ts).
+        viewer_url: external_exports.string().describe("Form URL for respondents - the live public URL. For an anonymous build this is a private preview link: answers are not saved, do not share it with respondents."),
+        dashboard_url: external_exports.string().optional().describe("Builder URL (sign in to edit). For an anonymous build this is a one-time claim link, not an editor."),
+        is_preview: external_exports.boolean().optional().describe("True when this is an anonymous preview build (answers are not saved), false otherwise."),
+        preview_url: external_exports.string().optional().describe(`Anonymous builds only. ${PREVIEW_URL_DESCRIPTION}`),
+        claim_url: external_exports.string().optional().describe(`Anonymous builds only. ${CLAIM_URL_DESCRIPTION}`),
         nodes: external_exports.array(external_exports.object({ id: external_exports.string(), type: external_exports.string(), prompt: external_exports.string() })).describe("Created nodes in order - IDs for attach_node_media / update_node"),
         plan: external_exports.object({ name: external_exports.string(), auth_mode: external_exports.string() }).optional().describe("Plan and auth context for this session"),
         workspace_name: external_exports.string().optional().describe("Name of the workspace the form was created in")
@@ -16442,7 +16455,7 @@ Example: A form that asks a question, collects contact info, then finishes:
       });
       if (!createResult.ok) {
         const message = `Form NOT created (nothing was saved): ${createResult.error}`;
-        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("invalid_token", createResult.apiMessage ?? message)) : errorResult(message);
+        return isAnonymousAccountRequired(createResult) ? errorResult(message, authChallengeMeta("insufficient_scope", createResult.apiMessage ?? message)) : errorResult(message);
       }
       const { data } = createResult;
       const formId = data.form_id;
@@ -16464,6 +16477,8 @@ Example: A form that asks a question, collects contact info, then finishes:
       const truncate2 = (s, n = 60) => s.length > n ? `${s.slice(0, n - 1)}\u2026` : s;
       const lines = [
         isPreview ? `Form created as a preview draft.` : `Form created and live.`,
+        // #4845: lead with the in-chat path (wording defined once in lib/anon-notice.ts).
+        ...isPreview ? [``, ANON_PREVIEW_ONLY_NOTICE] : [],
         ``,
         `Title: ${title}`,
         ...planContext?.is_authenticated && planContext.workspace_name ? [`Workspace: ${planContext.workspace_name}`] : [],
@@ -16472,18 +16487,18 @@ Example: A form that asks a question, collects contact info, then finishes:
         `Node IDs (use directly with attach_node_media / update_node - no get_form round-trip needed):`,
         ...createdNodes.map((n) => `- [${n.type}] "${truncate2(n.prompt)}": ${n.id}`),
         ``,
-        isPreview ? `PREVIEW URL (draft - only you can open this, not yet visible to respondents): ${data.viewer_url}` : `FORM URL (live - share this with respondents): ${data.viewer_url}`
+        isPreview ? `PREVIEW URL (draft - answers are not saved, only you can open this, not for respondents): ${data.viewer_url}` : `FORM URL (live - share this with respondents): ${data.viewer_url}`
       ];
       if (formUrl) {
         lines.push(
-          isPreview ? `CLAIM URL (one-time - sign up to claim and publish): ${formUrl}` : `DASHBOARD URL (sign in to edit and manage): ${formUrl}`
+          isPreview ? `CLAIM URL (fallback - or open this one-time link to sign up in the browser): ${formUrl}` : `DASHBOARD URL (sign in to edit and manage): ${formUrl}`
         );
       }
       const firstUrlLabel = isPreview ? "PREVIEW" : "FORM";
       const secondUrlLabel = isPreview ? "CLAIM" : "DASHBOARD";
       lines.push(
         ``,
-        isPreview ? `This form is a preview - claim and publish to start collecting responses.${formUrl ? " Open the CLAIM URL to sign up and claim the account this form already belongs to, then republish" : " Sign up to claim the account this form already belongs to and republish"} with clipform_update_form (is_live: true). The PREVIEW URL never becomes public on its own.` : `The form is live and accessible at the FORM URL above. Edits and media attached AFTER this point are NOT visible to respondents until you re-send is_live: true via clipform_update_form - republishing is the expected final step of a build, never skip it after attaching media/narration.`,
+        isPreview ? `This form is a preview, not live. When the user says "publish it", call clipform_update_form (is_live: true); it prompts them to sign in. The PREVIEW URL never becomes public on its own.` : `The form is live and accessible at the FORM URL above. Edits and media attached AFTER this point are NOT visible to respondents until you re-send is_live: true via clipform_update_form - republishing is the expected final step of a build, never skip it after attaching media/narration.`,
         formUrl ? `The URLs above are exact values; constructed or guessed URLs return 404. Use the ${firstUrlLabel} URL and ${secondUrlLabel} URL as shown.` : `The ${firstUrlLabel} URL above is an exact value; constructed or guessed URLs return 404.`,
         `Pass form_id on follow-up tools (get_form, add_node, attach_node_media, etc.).`
       );
@@ -16954,7 +16969,11 @@ function formatFormState(data) {
   const urls = projectUrls(data);
   if (urls) {
     lines.push(``, `Links (exact values - constructed or guessed URLs return 404):`);
-    if (urls.viewer) lines.push(`  Viewer (respondent view): ${urls.viewer}`);
+    if (urls.viewer) {
+      lines.push(
+        isPreviewViewerUrl(urls.viewer) ? `  ${ANON_PREVIEW_LINK_LABEL}: ${urls.viewer}` : `  Viewer (respondent view): ${urls.viewer}`
+      );
+    }
     if (urls.builder) lines.push(`  Builder: ${urls.builder}`);
     if (urls.summary) lines.push(`  Summary: ${urls.summary}`);
     if (urls.responses) lines.push(`  Responses: ${urls.responses}`);
@@ -16963,6 +16982,7 @@ function formatFormState(data) {
     if (urls.embed) lines.push(`  Embed: ${urls.embed}`);
     if (urls.dynamic_link) lines.push(`  Dynamic link: ${urls.dynamic_link}`);
   }
+  if (isPreviewViewerUrl(urls?.viewer)) lines.push(``, ANON_PREVIEW_ONLY_NOTICE);
   lines.push(``, `Nodes (in order):`);
   for (let i = 0; i < nodes.length; i++) {
     const q = nodes[i];
@@ -17003,7 +17023,7 @@ function registerGetFormTool(server) {
         is_live: external_exports.boolean().describe("Whether the form is published"),
         has_unpublished_changes: external_exports.boolean().describe("Live form has edits not yet republished"),
         urls: external_exports.object({
-          viewer: external_exports.string().optional().describe("Live respondent link, or a scoped preview link for an anonymous caller's draft. Omitted for a non-anonymous caller's unpublished draft."),
+          viewer: external_exports.string().optional().describe("Live respondent link, or - for an anonymous caller's draft - a private preview link where answers are not saved (do not share it with respondents). Omitted for a non-anonymous caller's unpublished draft."),
           builder: external_exports.string().optional().describe("Build tab - the node/canvas editor. Not present for an anonymous caller."),
           summary: external_exports.string().optional().describe("Summary tab - form overview and key stats. Not present for an anonymous caller."),
           responses: external_exports.string().optional().describe("Responses tab - individual submissions. Not present for an anonymous caller."),
@@ -17112,7 +17132,7 @@ function registerUpdateFormTool(server) {
         if (!result.ok) {
           return isAnonymousAccountRequired(result) ? errorResult(
             result.error,
-            authChallengeMeta("invalid_token", result.apiMessage ?? result.error)
+            authChallengeMeta("insufficient_scope", result.apiMessage ?? result.error)
           ) : errorResult(result.error);
         }
       }
@@ -17124,7 +17144,7 @@ function registerUpdateFormTool(server) {
         if (!tagResult.ok) {
           return isAnonymousAccountRequired(tagResult) ? errorResult(
             tagResult.error,
-            authChallengeMeta("invalid_token", tagResult.apiMessage ?? tagResult.error)
+            authChallengeMeta("insufficient_scope", tagResult.apiMessage ?? tagResult.error)
           ) : errorResult(tagResult.error);
         }
       }
@@ -18853,6 +18873,37 @@ function resolveCaptionRef(explicit, audioUrl) {
   if (explicit) return explicit;
   return typeof audioUrl === "string" && audioUrl ? audioUrl : void 0;
 }
+function soundNarration(inputProps) {
+  const sound = inputProps?.sound;
+  const narration = sound && typeof sound === "object" && sound.enabled !== false ? sound.narration : void 0;
+  if (typeof narration === "string" && narration) return narration;
+  const audioUrl = inputProps?.audioUrl;
+  return typeof audioUrl === "string" && audioUrl ? audioUrl : void 0;
+}
+var VOICEOVER_PROP_NAMES = [
+  "narration",
+  "audioUrl",
+  "narrationSrc",
+  "answerNarration",
+  "introNarration",
+  "outroNarration"
+];
+var VOICEOVER_CONTROL_NAMES = ["audio_url"];
+function nonEmpty(v) {
+  if (typeof v === "string") return v.length > 0;
+  if (Array.isArray(v)) return v.length > 0;
+  return typeof v === "object" && v !== null;
+}
+function renderHasNarration(input) {
+  if (input.captions && input.captions.length > 0) return true;
+  if (input.captionRef) return true;
+  const sound = input.inputProps?.sound;
+  const soundBlock = sound && typeof sound === "object" && sound.enabled !== false ? sound : void 0;
+  for (const name of VOICEOVER_PROP_NAMES) {
+    if (nonEmpty(input.inputProps?.[name]) || nonEmpty(soundBlock?.[name])) return true;
+  }
+  return VOICEOVER_CONTROL_NAMES.some((name) => nonEmpty(input.controls?.[name]));
+}
 async function createRenderPlaceholder(input) {
   try {
     const me = await callApi("/me", { method: "GET" });
@@ -18873,7 +18924,7 @@ async function createRenderPlaceholder(input) {
     if (!attached.ok) return void 0;
     await callApi(`/forms/${input.formId}/nodes/${input.nodeId}/media`, {
       method: "PATCH",
-      body: { fit_media: true, show_captions: true }
+      body: { fit_media: true, show_captions: input.narrated !== false }
     }).catch(() => void 0);
     return { workspaceId, assetId };
   } catch {
@@ -18901,6 +18952,7 @@ async function completeViaPlaceholder(placeholder, input) {
     const body = { url: input.publicUrl };
     if (input.captions?.length) body.captions = input.captions;
     if (input.captionRef) body.caption_ref = input.captionRef;
+    if (input.narrated === false) body.transcribe = false;
     const completed = await callApi(`/workspaces/${placeholder.workspaceId}/media/${placeholder.assetId}/complete`, {
       method: "POST",
       body
@@ -18930,6 +18982,7 @@ async function legacyAutoAttach(input) {
     };
     if (input.captions?.length) createBody.captions = input.captions;
     if (input.captionRef) createBody.caption_ref = input.captionRef;
+    if (input.narrated === false) createBody.transcribe = false;
     const created = await callApi(`/workspaces/${workspaceId}/media`, { method: "POST", body: createBody });
     if (!created.ok) return { attached: false, error: `Failed to create media asset: ${created.error}` };
     const mediaAssetId = created.data?.media_asset_id;
@@ -18943,7 +18996,7 @@ async function legacyAutoAttach(input) {
     }
     await callApi(`/forms/${input.formId}/nodes/${input.nodeId}/media`, {
       method: "PATCH",
-      body: { fit_media: true, show_captions: true }
+      body: { fit_media: true, show_captions: input.narrated !== false }
     }).catch(() => void 0);
     let republished = false;
     const form = await callApi(`/forms/${input.formId}`, { method: "GET" });
@@ -18981,7 +19034,9 @@ var RenderItemSchema = external_exports.object({
 function fireRender(item, formId) {
   const job = createJob("clipform_render_composition");
   const mediaType = item.outputFormat === "png" ? "still" : "video";
-  const placeholderPromise = item.node_id && formId ? createRenderPlaceholder({ formId, nodeId: item.node_id, mediaType }) : Promise.resolve(void 0);
+  const captionRef = resolveCaptionRef(item.caption_ref, soundNarration(item.inputProps));
+  const narrated = renderHasNarration({ captions: item.captions, captionRef, inputProps: item.inputProps });
+  const placeholderPromise = item.node_id && formId ? createRenderPlaceholder({ formId, nodeId: item.node_id, mediaType, narrated }) : Promise.resolve(void 0);
   callApi("/internal/render", {
     timeoutMs: 3e5,
     // local renders pay a cold webpack bundle; Lambda is fast but bursty
@@ -19008,8 +19063,9 @@ function fireRender(item, formId) {
           publicUrl,
           mediaType,
           captions: item.captions,
-          captionRef: item.caption_ref,
-          placeholder
+          captionRef,
+          placeholder,
+          narrated
         });
       } else {
         const message = "Render completed without a public_url; nothing to attach.";
@@ -19121,7 +19177,9 @@ ${RENDER_ATTACH_RULE} In batch mode, set node_id per item (see items) and form_i
         );
       }
       const mediaTypeSingle = outputFormat === "png" ? "still" : "video";
-      const placeholderPromise = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType: mediaTypeSingle }) : Promise.resolve(void 0);
+      const captionRefSingle = resolveCaptionRef(caption_ref, soundNarration(inputProps));
+      const narrated = renderHasNarration({ captions, captionRef: captionRefSingle, inputProps });
+      const placeholderPromise = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType: mediaTypeSingle, narrated }) : Promise.resolve(void 0);
       const result = await callApi("/internal/render", {
         timeoutMs: 3e5,
         body: { compositionId, outputFormat, inputProps: inputProps ?? {} }
@@ -19142,8 +19200,9 @@ ${RENDER_ATTACH_RULE} In batch mode, set node_id per item (see items) and form_i
             publicUrl: data.public_url,
             mediaType: mediaTypeSingle,
             captions,
-            captionRef: caption_ref,
-            placeholder
+            captionRef: captionRefSingle,
+            placeholder,
+            narrated
           });
         } else if (placeholder) {
           await failPlaceholder(placeholder, "Render completed without a public_url; nothing to attach.");
@@ -19424,11 +19483,12 @@ ${RENDER_ATTACH_RULE}`,
         return errorResult("form_id is required when node_id is set.");
       }
       const captionRef = resolveCaptionRef(caption_ref, controls?.audio_url);
+      const narrated = renderHasNarration({ captions, captionRef, controls });
       const renderBody = { template, controls: controls ?? {}, outputFormat };
       const mediaType = outputFormat === "png" ? "still" : "video";
       if (wait === false) {
         const job = createJob("clipform_render_video_template");
-        const placeholderPromise2 = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType }) : Promise.resolve(void 0);
+        const placeholderPromise2 = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType, narrated }) : Promise.resolve(void 0);
         callApi("/internal/render-template", {
           timeoutMs: 3e5,
           body: renderBody
@@ -19444,7 +19504,7 @@ ${RENDER_ATTACH_RULE}`,
             const publicUrl = r.data.public_url;
             const placeholder = await placeholderPromise2;
             if (publicUrl) {
-              attach2 = await autoAttachRender({ formId: form_id, nodeId: node_id, publicUrl, mediaType, captions, captionRef, placeholder });
+              attach2 = await autoAttachRender({ formId: form_id, nodeId: node_id, publicUrl, mediaType, captions, captionRef, placeholder, narrated });
             } else {
               const message = "Render completed without a public_url; nothing to attach.";
               attach2 = { attached: false, error: message };
@@ -19467,7 +19527,7 @@ ${RENDER_ATTACH_RULE}`,
           { status: "rendering", job_id: job.id, template, output_format: outputFormat }
         );
       }
-      const placeholderPromise = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType }) : Promise.resolve(void 0);
+      const placeholderPromise = node_id && form_id ? createRenderPlaceholder({ formId: form_id, nodeId: node_id, mediaType, narrated }) : Promise.resolve(void 0);
       const result = await callApi("/internal/render-template", {
         timeoutMs: 3e5,
         body: renderBody
@@ -19482,7 +19542,7 @@ ${RENDER_ATTACH_RULE}`,
       if (node_id && form_id) {
         const placeholder = await placeholderPromise;
         if (data.public_url) {
-          attach = await autoAttachRender({ formId: form_id, nodeId: node_id, publicUrl: data.public_url, mediaType, captions, captionRef, placeholder });
+          attach = await autoAttachRender({ formId: form_id, nodeId: node_id, publicUrl: data.public_url, mediaType, captions, captionRef, placeholder, narrated });
         } else if (placeholder) {
           await failPlaceholder(placeholder, "Render completed without a public_url; nothing to attach.");
         }
@@ -20147,4 +20207,4 @@ export {
   * MIT Licensed
   *)
 */
-//# sourceMappingURL=chunk-BKTCQ5HS.js.map
+//# sourceMappingURL=chunk-XFGQP52H.js.map