@clipform/mcp-server 4.4.1 → 4.6.0

package/dist/api-client.js

@@ -6,7 +6,7 @@ import {
   recoveryHint,
   structuredResult,
   textResult
-} from "./chunk-N4PLZPKS.js";
+} from "./chunk-FYY23O3F.js";
 import "./chunk-BV3KA6HC.js";
 import "./chunk-PBQ5BQWD.js";
 import "./chunk-PZ5AY32C.js";

package/dist/{chunk-HOBEHRFH.js → chunk-74LQFWVD.js}

@@ -2,7 +2,7 @@ import {
   CURRENT_PLAN_VERSIONS,
   PLAN_LIMITS,
   callApi
-} from "./chunk-N4PLZPKS.js";
+} from "./chunk-FYY23O3F.js";
 import {
   getMcpAuth
 } from "./chunk-BV3KA6HC.js";
@@ -123,4 +123,4 @@ export {
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-HOBEHRFH.js.map
+//# sourceMappingURL=chunk-74LQFWVD.js.map

package/dist/{chunk-VFZMLB2S.js → chunk-C66UR4R6.js}

@@ -1,12 +1,12 @@
 import {
   FULL_CAPS,
   getSessionContextWithAuth
-} from "./chunk-HOBEHRFH.js";
+} from "./chunk-74LQFWVD.js";
 import {
   FORM_TYPES,
   WORKFLOW_TYPES,
   getDiscoveryParams
-} from "./chunk-N4PLZPKS.js";
+} from "./chunk-FYY23O3F.js";
 import {
   __export
 } from "./chunk-PZ5AY32C.js";
@@ -15231,4 +15231,4 @@ export {
   getWorkflowText,
   registerPrompts
 };
-//# sourceMappingURL=chunk-VFZMLB2S.js.map
+//# sourceMappingURL=chunk-C66UR4R6.js.map

package/dist/{chunk-N4PLZPKS.js → chunk-FYY23O3F.js}

@@ -239,13 +239,13 @@ var FEATURES = {
   node_draw: {
     name: "Drawing",
     description: "Drawing canvas; respondents draw and it is saved as a PNG image",
-    // Went GA 2026-06-27 (#1012), pulled back behind the allowlist 2026-07-20
-    // (#2289) while pen options / match-to-shape mature. Prod usage at
-    // pull-back verified = Clipform Public only, zero external customers.
-    // Existing nodes still render (creation-gated only, camera precedent).
-    enabled: false,
-    status: "beta",
-    wentLiveAt: "2026-06-27",
+    // First GA 2026-06-27 (#1012), pulled back behind the allowlist 2026-07-20
+    // (#2289), back to GA 2026-10-26 (#5052). The NODE_COMPANY_ALLOWLIST.node_draw
+    // entry below stays as a safety valve: flip enabled back to false to pull it
+    // behind the allowlist again (creation-gated only - existing nodes render).
+    enabled: true,
+    status: "live",
+    wentLiveAt: "2026-10-26",
     category: "node-types"
   },
   node_camera: {
@@ -253,12 +253,12 @@ var FEATURES = {
     // Description mirrors NODE_TYPES.camera.description (the node SSOT) - the
     // node captures photo OR video (allowed_capture, #2759), not photo only.
     description: "Capture a photo or video from the device camera",
-    // Dogfooding in live via NODE_COMPANY_ALLOWLIST.node_camera below. The DB
-    // node_type_check constraint already accepts 'camera' in prod (migration
-    // #2103 merged + applied 2026-07-17), so GA is now a pure app-config flip:
-    // set enabled true + status 'live' and follow feature-lifecycle.
-    enabled: false,
-    status: "planned",
+    // GA 2026-10-26 (#5017). The NODE_COMPANY_ALLOWLIST.node_camera entry
+    // below stays as a safety valve: flip enabled back to false to pull it
+    // behind the allowlist again (draw precedent).
+    enabled: true,
+    status: "live",
+    wentLiveAt: "2026-10-26",
     category: "node-types"
   },
   node_conditional: {
@@ -837,6 +837,8 @@ var HELP_TOPICS = {
   // from a node's type id.
   node_choice: { path: "/help/node-types", anchor: "choice" },
   node_open: { path: "/help/node-types", anchor: "open-ended" },
+  node_camera: { path: "/help/node-types", anchor: "camera" },
+  node_draw: { path: "/help/node-types", anchor: "drawing" },
   node_details: { path: "/help/node-types", anchor: "details" },
   node_button: { path: "/help/node-types", anchor: "button" },
   node_end_screen: { path: "/help/node-types", anchor: "end-screen" },
@@ -852,6 +854,19 @@ function buildHelpLinks(docsBaseUrl) {
   return links;
 }
 
+// ../config/draw-presets.js
+var DRAW_PRESETS = [
+  { id: "body-front", label: "Body diagram - front", shortLabel: "Front", file: "body-front.png", group: "body" },
+  { id: "body-back", label: "Body diagram - back", shortLabel: "Back", file: "body-back.png", group: "body" },
+  { id: "hands-palms", label: "Hands diagram - palms", shortLabel: "Palms", file: "hands-palms.png", group: "body" },
+  { id: "hands-backs", label: "Hands diagram - backs", shortLabel: "Backs of hands", file: "hands-backs.png", group: "body" },
+  { id: "feet-soles", label: "Feet diagram - soles", shortLabel: "Soles", file: "feet-soles.png", group: "body" },
+  { id: "face-profile", label: "Face diagram - profile", shortLabel: "Face", file: "face-profile.png", group: "body" },
+  { id: "vehicle-sides", label: "Vehicle diagram - sides", shortLabel: "Sides", file: "vehicle-sides.png", group: "vehicle" },
+  { id: "vehicle-top", label: "Vehicle diagram - top and ends", shortLabel: "Top and ends", file: "vehicle-top.png", group: "vehicle" }
+];
+var DRAW_PRESET_IDS = DRAW_PRESETS.map((p) => p.id);
+
 // ../config/node-types.js
 var RESPONSE_FORMATS = ["text", "audio", "video"];
 var CONSENT_TYPES = ["consent", "opt_in"];
@@ -1348,8 +1363,11 @@ var NODE_TYPES = {
               type: { type: "string", enum: CONSENT_TYPES },
               // Optional attached agreement document (PDF only in v1, #2760). Served
               // from the public node-media bucket; `version` bumps on file replace.
+              // anon_locked_file: an outside file on a guest live form (#4847), stripped from the
+              // payload so the item renders as a plain consent checkbox.
               document: {
                 type: "object",
+                anon_locked_file: true,
                 properties: {
                   storage_path: { type: "string" },
                   filename: { type: "string" },
@@ -1628,7 +1646,8 @@ var NODE_TYPES = {
           default: [3, 6, 12],
           description: "Stroke widths (px) the respondent can choose. The middle entry is the default selection; a single entry locks the pen to that width and hides the picker."
         },
-        // The reference image itself is the node's attached media (media_id,
+        // The reference image is EITHER a built-in outline (`preset`, below: a static image
+        // referenced by name, #5263) OR the node's attached media (media_id,
         // via the same media_asset/create-media.ts pipeline every other
         // supports_media node uses) - not a config field, to avoid a
         // duplicated asset ref. This only tunes its display/bake.
@@ -1637,9 +1656,11 @@ var NODE_TYPES = {
           label: "Diagram",
           description: "Display settings for the optional diagram the respondent draws on (a body, vehicle or your own image)",
           properties: {
-            // Fit + position live on the node_media placement (fit_media / position_x), shared with every media node.
+            // Fit + position (uploaded image only) live on the node_media placement (fit_media / position_x), shared with every media node.
             opacity: { type: "number", minimum: 0, maximum: 1, default: 1, label: "Opacity", description: "Diagram opacity, from 0 (invisible) to 1 (fully opaque)" },
-            scale: { type: "number", minimum: 0.5, maximum: 1, default: 1, label: "Size", description: "Diagram size as a fraction of its fitted size. Applies only when the diagram is fitted (fit_media true)." }
+            scale: { type: "number", minimum: 0.5, maximum: 1, default: 1, label: "Size", description: "Diagram size as a fraction of its fitted size. Applies only when the diagram is fitted (fit_media true)." },
+            // A built-in outline (#5263): a static image served by the viewer, referenced by name. Not a media asset - no placement. Wins over an attached image; always shown whole and centred.
+            preset: { type: "string", enum: DRAW_PRESETS.map((p) => p.id), label: "Built-in diagram", description: "Use a ready-made outline instead of an uploaded image: " + DRAW_PRESETS.map((p) => `${p.id} (${p.label})`).join(", ") + ". Shown whole and centred, so fit/position do not apply. Shown instead of any attached image while set; unset it to use the attached image of the node." }
           }
         },
         // Optional match-to-shape game (#2148). Absent entirely by default
@@ -1892,7 +1913,25 @@ var NODE_TYPES = {
               storage_path: { type: "string", description: "Bucket-prefixed storage path: respondent-captures/workspace_id/form_id/session_id/uuid.ext" },
               width: { type: "number", description: "Displayed pixel width, when the browser could read it (#5125)" },
               height: { type: "number", description: "Displayed pixel height, when the browser could read it (#5125)" },
-              duration: { type: "number", description: "Video duration in seconds, when readable (#5125)" }
+              duration: { type: "number", description: "Video duration in seconds, when readable (#5125)" },
+              // Viewer-written for a video recorded without the on-device 9:16 crop (#5253); the camera
+              // video processor validates it and crops the playback copy server-side.
+              preview_crop: {
+                type: "object",
+                description: "What the viewfinder showed (stream and preview box sizes); untrusted, validated server-side",
+                properties: {
+                  stream_width: { type: "number" },
+                  stream_height: { type: "number" },
+                  preview_width: { type: "number" },
+                  preview_height: { type: "number" }
+                }
+              },
+              // Server-written by the camera video processor (#5114); stripped from client input.
+              thumbnail_storage_path: { type: "string", description: "Poster frame (webp) of a video, bucket-prefixed" },
+              playback_storage_path: { type: "string", description: "Browser-safe H.264/AAC mp4 copy of a video, when the original is not one" },
+              processed_at: { type: "string", description: "When the video was processed" },
+              processing_attempts: { type: "integer", description: "Failed processing attempts so far" },
+              processing_failed_at: { type: "string", description: "Set once processing gave up" }
             }
           },
           minItems: 1,
@@ -2005,8 +2044,8 @@ var NODE_TYPES = {
         currency: { enum: ["usd", "eur", "gbp", "cad", "aud"], type: "string", label: "Currency", default: "usd", required: true, description: "Three-letter ISO currency code" },
         provider: { enum: ["stripe", "paddle"], type: "string", label: "Payment Provider", default: "stripe", required: true, description: "Payment provider to use" },
         workspace_integration_id: { type: "string", label: "Workspace Integration ID", description: "UUID of the workspace_integrations record for the connected payment account" },
-        title: { type: "string", label: "Heading", description: "Heading shown above the order summary" },
-        description: { type: "string", label: "Description", description: "Body text shown below the heading in the order summary" }
+        title: { type: "string", label: "Heading", description: "Heading shown above the order summary", anon_locked_keep: true },
+        description: { type: "string", label: "Description", description: "Body text shown below the heading in the order summary", anon_locked_keep: true }
       },
       description: "Payment configuration with provider-agnostic flat structure"
     },
@@ -2256,7 +2295,7 @@ var NODE_TYPES = {
     config_schema: {
       type: "object",
       properties: {
-        url: { type: "string", label: "Redirect URL", placeholder: "https://example.com" },
+        url: { type: "string", label: "Redirect URL", placeholder: "https://example.com", outbound_link: true },
         auto_redirect: { type: "boolean", label: "Auto-redirect", default: true, description: "Automatically redirect to the URL instead of showing a button" }
       }
     },
@@ -2299,7 +2338,7 @@ var NODE_TYPES = {
             required: ["id", "url"],
             properties: {
               id: { type: "string" },
-              url: { type: "string", label: "URL", placeholder: "https://example.com" },
+              url: { type: "string", label: "URL", placeholder: "https://example.com", outbound_link: true },
               title: { type: "string", label: "Heading" },
               description: { type: "string", label: "Description" },
               order: { type: "number", label: "Sort order" }
@@ -2360,7 +2399,7 @@ var NODE_TYPES = {
           label: "Downloadable files"
         },
         button_text: { type: "string", label: "Continue button text", default: "Continue" },
-        description: { type: "string", label: "Description text" }
+        description: { type: "string", label: "Description text", anon_locked_keep: true }
       }
     },
     response_schema: {
@@ -2629,6 +2668,32 @@ var ANON_MCP_OUTBOUND_LINK_RULES = (() => {
   for (const [type, def] of Object.entries(NODE_TYPES)) walk(type, def.config_schema, []);
   return rules;
 })();
+var ANON_MCP_STRIPPED_FIELD_RULES = (() => {
+  const rules = ANON_MCP_OUTBOUND_LINK_RULES.filter((r) => r.kind === "non_empty" && !ANON_MCP_BLOCKED_NODE_TYPES.includes(r.type)).map(({ type, path }) => ({ type, path }));
+  const walk = (type, schema, path) => {
+    if (!schema || typeof schema !== "object") return;
+    for (const [key, prop] of Object.entries(schema.properties ?? {})) {
+      const next = [...path, key];
+      if (prop.anon_locked_file === true) rules.push({ type, path: next });
+      walk(type, prop, next);
+      if (prop.items) walk(type, prop.items, [...next, "[]"]);
+    }
+    for (const branch of [...schema.oneOf ?? [], ...schema.anyOf ?? []]) walk(type, branch, path);
+  };
+  for (const [type, def] of Object.entries(NODE_TYPES)) {
+    if (!ANON_MCP_BLOCKED_NODE_TYPES.includes(type)) walk(type, def.config_schema, []);
+  }
+  return rules;
+})();
+var ANON_MCP_KEPT_TEXT_KEYS = (() => {
+  const out = {};
+  for (const type of ANON_MCP_BLOCKED_NODE_TYPES) {
+    const props = NODE_TYPES[type]?.config_schema?.properties ?? {};
+    const keys = Object.entries(props).filter(([, p]) => p && p.anon_locked_keep === true && p.type === "string").map(([k]) => k);
+    if (keys.length > 0) out[type] = keys;
+  }
+  return out;
+})();
 
 // ../config/form-types.js
 var FORM_TYPES = {
@@ -3014,6 +3079,7 @@ var BUSINESS = {
 };
 var MEDIA_DIRECT_MAX_BYTES = 20 * 1024 * 1024;
 var MEDIA_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
+var DRAW_DIAGRAM_SPEC = `PNG with simple dark outlines on a light or transparent background (no shading or text), portrait, at least 1000px wide. Up to ${Math.round(MEDIA_IMAGE_MAX_BYTES / (1024 * 1024))}MB.`;
 var MEDIA_DOCUMENT_MAX_BYTES = 20 * 1024 * 1024;
 var SUPABASE_STORAGE_MAX_BYTES = 200 * 1024 * 1024;
 var VIDEO_COMPRESS_FLOOR_BYTES = 1 * 1024 * 1024;
@@ -3543,4 +3609,4 @@ export {
   textResult,
   structuredResult
 };
-//# sourceMappingURL=chunk-N4PLZPKS.js.map
+//# sourceMappingURL=chunk-FYY23O3F.js.map