@clipform/mcp-server 4.7.0 → 4.7.1

package/dist/{chunk-EFPJA3JE.js → chunk-4E36KN6D.js}

@@ -15,6 +15,9 @@ function anonPreviewNotice() {
 var ANON_PREVIEW_LINK_LABEL = "Preview (answers not saved)";
 var ANON_PREVIEW_ONLY_NOTICE = "The form is ready as a preview. To put it live, call clipform_update_form with is_live:true - no sign-in is needed. In the preview, answers are not saved: do not share the preview link with respondents.";
 var ANON_PREVIEW_ONLY_NOTICE_DRAFTS_ONLY = 'The form is ready as a preview. To go live, say "publish it" - that prompts sign-in and keeps this chat connected to your account. In the preview, answers are not saved: do not share the preview link with respondents.';
+function isAnonymousSession() {
+  return getMcpAuth()?.is_anonymous === true;
+}
 function isConnectorGuest() {
   const auth = getMcpAuth();
   return auth?.is_anonymous === true && auth.connector_guest === true;
@@ -130,6 +133,7 @@ export {
   ANON_PREVIEW_NOTICE,
   anonPreviewNotice,
   ANON_PREVIEW_LINK_LABEL,
+  isAnonymousSession,
   isConnectorGuest,
   previewOnlyNotice,
   PREVIEW_URL_DESCRIPTION,
@@ -141,4 +145,4 @@ export {
   getSessionContextWithAuth,
   getSessionContext
 };
-//# sourceMappingURL=chunk-EFPJA3JE.js.map
+//# sourceMappingURL=chunk-4E36KN6D.js.map

package/dist/chunk-4E36KN6D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/anon-notice.ts","../src/lib/caps.ts","../src/lib/session-context.ts"],"sourcesContent":["import { getMcpAuth } from \"./auth-context.js\";\n\n/**\n * #4650: anonymous (preview) accounts are temporary. Date-free by design - the\n * generic notice promises no day count. The 7-day offline expiry of a live\n * guest form IS enforced now (#4847; ANON_MCP_LIVE_TTL_DAYS, stated in the\n * create_form reply), while the account purge keeps its own schedule (#4662).\n * Defined once; every anonymous-lane surface (create/update_form text, whoami,\n * session resource) reuses it.\n */\nexport const ANON_PREVIEW_NOTICE =\n  \"Preview accounts are temporary - claim yours to keep your forms.\";\n\n/** The notice for an anonymous MCP caller, or null for everyone else. */\nexport function anonPreviewNotice(): string | null {\n  return getMcpAuth()?.is_anonymous ? ANON_PREVIEW_NOTICE : null;\n}\n\n/**\n * #4845: a preview link is private, never a respondent link (answers are not\n * saved). A guest build now goes live at creation (#4847); a preview is what\n * remains for a draft (moderation held it, or it was taken offline). Wording\n * defined once; create_form, get_form, the format-form link label and the\n * output-schema descriptions all reuse it.\n */\nexport const ANON_PREVIEW_LINK_LABEL = \"Preview (answers not saved)\";\n\nexport const ANON_PREVIEW_ONLY_NOTICE =\n  'The form is ready as a preview. To put it live, call clipform_update_form with is_live:true - no sign-in is needed. In the preview, answers are not saved: do not share the preview link with respondents.';\n\n/** The drafts-only lanes (bot, email, web demo - not the MCP connector): signing up is what publishes. */\nexport const ANON_PREVIEW_ONLY_NOTICE_DRAFTS_ONLY =\n  'The form is ready as a preview. To go live, say \"publish it\" - that prompts sign-in and keeps this chat connected to your account. In the preview, answers are not saved: do not share the preview link with respondents.';\n\n/**\n * True when the caller is an anonymous session per the MCP auth context. /v1/me\n * reports `auth_mode: \"api_key\"` for the anonymous MCP lane (it runs on a bot key),\n * so `/me` alone cannot tell a guest from a signed-in key - the context can.\n */\nexport function isAnonymousSession(): boolean {\n  return getMcpAuth()?.is_anonymous === true;\n}\n\n/** True on the MCP handler's anonymous connector lane (#4847). */\nexport function isConnectorGuest(): boolean {\n  const auth = getMcpAuth();\n  return auth?.is_anonymous === true && auth.connector_guest === true;\n}\n\n/** The preview-only notice for this caller's lane. */\nexport function previewOnlyNotice(): string {\n  return isConnectorGuest() ? ANON_PREVIEW_ONLY_NOTICE : ANON_PREVIEW_ONLY_NOTICE_DRAFTS_ONLY;\n}\n\nexport const PREVIEW_URL_DESCRIPTION =\n  \"Private preview of the form. Answers are not saved, so do not share it with respondents.\";\n\nexport const CLAIM_URL_DESCRIPTION =\n  \"One-time link to sign up, keep this form and switch on its locked steps.\";\n\n/**\n * #5158: sign-in happens in a popup the model never sees, so after an adopt\n * (apps/api oauth-adopt.ts) the tool result tells it the form is now the\n * user's. Prepended by the server.ts registerTool wrapper.\n */\nexport const ADOPTED_FORM_NOTICE =\n  \"Signed in - this form moved from the temporary preview account into your Clipform account, so it is yours now. The earlier claim link is no longer needed.\";\n\n/**\n * #4847: a claimed form with a locked step (payment, uploads, links ...) was\n * taken offline by the claim lock, so it arrives as a draft. Publishing it as\n * the new owner switches those steps on.\n */\nexport const ADOPTED_DRAFT_FORM_NOTICE =\n  \"Signed in - this form moved from the temporary preview account into your Clipform account, so it is yours now. It is a draft now: publish it (clipform_update_form with is_live:true) to switch its steps on. The earlier claim link is no longer needed.\";\n\n/** The same call published the claimed form: every step is on. */\nexport const ADOPTED_LIVE_FORM_NOTICE =\n  \"Signed in - this form moved from the temporary preview account into your Clipform account, so it is yours now. It is live with every step switched on. The earlier claim link is no longer needed.\";\n\n/**\n * Prepend the adopt notice to a successful result for a just-adopted form.\n * content only; structuredContent untouched. A form the claim lock drafted gets\n * the draft variant, or the live one when THIS call is update_form is_live:true.\n */\nexport function withAdoptedNotice<T>(result: T, args: unknown, toolName?: string): T {\n  const formId = (args as { form_id?: unknown } | undefined)?.form_id;\n  if (typeof formId !== \"string\") return result;\n  const auth = getMcpAuth();\n  const id = formId.toLowerCase();\n  const has = (ids?: string[]) => !!ids && ids.map((i) => i.toLowerCase()).includes(id);\n  if (!has(auth?.adopted_form_ids)) return result;\n  const r = result as { isError?: boolean; content?: unknown } | undefined;\n  if (!r || r.isError || !Array.isArray(r.content)) return result;\n  let notice = ADOPTED_FORM_NOTICE;\n  if (has(auth?.adopted_draft_form_ids)) {\n    const publishedNow =\n      toolName === \"clipform_update_form\" && (args as { is_live?: unknown } | undefined)?.is_live === true;\n    notice = publishedNow ? ADOPTED_LIVE_FORM_NOTICE : ADOPTED_DRAFT_FORM_NOTICE;\n  }\n  return { ...r, content: [{ type: \"text\", text: notice }, ...r.content] } as T;\n}\n\n/** True for a viewer link in preview mode (an anonymous caller's draft). */\nexport function isPreviewViewerUrl(url: unknown): boolean {\n  return typeof url === \"string\" && url.includes(\"mode=preview\");\n}\n","import type { McpToolset } from \"@vid-master/config\";\n\n/**\n * What a connected surface can actually do, derived from the connect-time\n * toolset filter (#3309) so the guidance layers (server instructions, prompt\n * recipes, `clipform_get_workflow`, craft guides) never reference a tool the\n * surface doesn't register (#3681).\n *\n * The Claude Connectors Directory surface (`mcp.clipform.io/forms`) is\n * account + forms only: no media generation and no research helpers. A\n * workflow that still says \"call clipform_generate_tts\" there sends the model\n * at a tool that doesn't exist, which shows up in review as failed tool\n * calls. Every guidance producer takes a ServerCaps and gates on it.\n */\nexport interface ServerCaps {\n  /** Narration, video, image, music, render, and asset tools are registered. */\n  media: boolean;\n  /** News lookup and the generation audit log are registered. */\n  research: boolean;\n  /** Form tools (create, edit, publish) are registered. */\n  forms: boolean;\n}\n\n/** Every toolset registered - stdio/npx and the bare remote endpoint. */\nexport const FULL_CAPS: ServerCaps = Object.freeze({ media: true, research: true, forms: true });\n\nexport function capsFromToolsets(toolsets?: readonly McpToolset[]): ServerCaps {\n  if (toolsets === undefined) return FULL_CAPS;\n  return {\n    media: toolsets.includes(\"media\"),\n    research: toolsets.includes(\"research\"),\n    forms: toolsets.includes(\"forms\"),\n  };\n}\n","import { BUSINESS, PLAN_LIMITS, CURRENT_PLAN_VERSIONS } from \"@vid-master/config\";\nimport { callApi } from \"./api-client.js\";\nimport { ANON_PREVIEW_NOTICE } from \"./anon-notice.js\";\nimport { getMcpAuth } from \"./auth-context.js\";\n\nexport type AuthMode = \"authenticated\" | \"anonymous\";\n\nexport interface SessionContextResult {\n  text: string;\n  authMode: AuthMode;\n}\n\nexport async function getSessionContextWithAuth(): Promise<SessionContextResult> {\n  let me: any;\n  const authCtx = getMcpAuth();\n  if (authCtx?.loadInternalContent && !authCtx.api_key) {\n    // #4657: the no-workspace anon lane (get_workflow with no mint) has no\n    // workspace for /me to describe, so plan caps default to Free.\n    const free = PLAN_LIMITS[CURRENT_PLAN_VERSIONS[0]];\n    me = {\n      auth_mode: \"anonymous\",\n      plan: {\n        name: free.name,\n        tier: free.tier,\n        node_limit: free.node_limit,\n        form_limit: free.form_limit ?? null,\n        custom_theme: free.custom_theme,\n      },\n    };\n  } else {\n    let result;\n    try {\n      result = await callApi(\"/me\", { method: \"GET\" });\n    } catch {\n      return { text: \"\", authMode: \"anonymous\" };\n    }\n    if (!result.ok) return { text: \"\", authMode: \"anonymous\" };\n    me = result.data as any;\n  }\n  // The API's auth_mode is \"api_key\" | \"oauth\" | \"session\" | \"anonymous\".\n  // Anything credentialed counts as authenticated - the old `=== \"oauth\"`\n  // check matched nothing the API returns, so API-key sessions were labelled\n  // anonymous with a \"sign in to unlock\" nudge right next to their real\n  // plan (#412 F6).\n  // The anon MCP lane runs as a minted bot key (/me says \"api_key\"), so the\n  // auth context is the truth for anonymous (#4653).\n  const apiAuthMode: string = getMcpAuth()?.is_anonymous\n    ? \"anonymous\"\n    : ((me.auth_mode as string) ?? \"anonymous\");\n  const authMode: AuthMode = apiAuthMode === \"anonymous\" ? \"anonymous\" : \"authenticated\";\n  const plan = me.plan;\n  const lines: string[] = [];\n\n  lines.push(\"## Your Session\");\n  if (authMode === \"authenticated\") {\n    lines.push(\n      apiAuthMode === \"api_key\"\n        ? \"Auth: API key (workspace-scoped)\"\n        : \"Auth: signed in (connected to a Clipform account)\"\n    );\n    // Workspace NAME only - the workspace UUID and the raw user_id/company_id\n    // are internal database identifiers the model never needs (response\n    // hygiene / disclosure guard, #2976).\n    lines.push(`Workspace: ${me.workspace?.name ?? \"Unknown\"}`);\n  } else {\n    lines.push(\"Auth: anonymous (not connected to a Clipform account)\");\n    if (me.workspace) {\n      lines.push(`Workspace: ${me.workspace.name}`);\n    }\n  }\n  lines.push(`Plan: ${plan.name} (tier ${plan.tier})`);\n  if (plan.node_limit !== null) {\n    lines.push(`Question limit: ${plan.node_limit} per form`);\n  } else {\n    lines.push(\"Questions: unlimited\");\n  }\n  if (plan.form_limit !== null) {\n    lines.push(`Form limit: ${plan.form_limit} forms`);\n  } else {\n    lines.push(\"Forms: unlimited\");\n  }\n  if (plan.custom_theme === false) {\n    lines.push(\"Custom themes: not available on this plan\");\n  }\n  if (authMode === \"anonymous\") {\n    // Neutral statement of fact, no upsell/CTA copy (commerce sweep, #2976):\n    // an anonymous session's forms are not tied to an account until one signs in.\n    lines.push(`\\nAnonymous session: forms are not tied to a Clipform account until you sign in.`);\n    lines.push(ANON_PREVIEW_NOTICE);\n  }\n\n  return { text: lines.join(\"\\n\"), authMode };\n}\n\nexport async function getSessionContext(): Promise<string> {\n  const { text } = await getSessionContextWithAuth();\n  return text;\n}\n"],"mappings":";;;;;;;;;;AAUO,IAAM,sBACX;AAGK,SAAS,oBAAmC;AACjD,SAAO,WAAW,GAAG,eAAe,sBAAsB;AAC5D;AASO,IAAM,0BAA0B;AAEhC,IAAM,2BACX;AAGK,IAAM,uCACX;AAOK,SAAS,qBAA8B;AAC5C,SAAO,WAAW,GAAG,iBAAiB;AACxC;AAGO,SAAS,mBAA4B;AAC1C,QAAM,OAAO,WAAW;AACxB,SAAO,MAAM,iBAAiB,QAAQ,KAAK,oBAAoB;AACjE;AAGO,SAAS,oBAA4B;AAC1C,SAAO,iBAAiB,IAAI,2BAA2B;AACzD;AAEO,IAAM,0BACX;AAEK,IAAM,wBACX;AAOK,IAAM,sBACX;AAOK,IAAM,4BACX;AAGK,IAAM,2BACX;AAOK,SAAS,kBAAqB,QAAW,MAAe,UAAsB;AACnF,QAAM,SAAU,MAA4C;AAC5D,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,OAAO,WAAW;AACxB,QAAM,KAAK,OAAO,YAAY;AAC9B,QAAM,MAAM,CAAC,QAAmB,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,SAAS,EAAE;AACpF,MAAI,CAAC,IAAI,MAAM,gBAAgB,EAAG,QAAO;AACzC,QAAM,IAAI;AACV,MAAI,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,QAAQ,EAAE,OAAO,EAAG,QAAO;AACzD,MAAI,SAAS;AACb,MAAI,IAAI,MAAM,sBAAsB,GAAG;AACrC,UAAM,eACJ,aAAa,0BAA2B,MAA4C,YAAY;AAClG,aAAS,eAAe,2BAA2B;AAAA,EACrD;AACA,SAAO,EAAE,GAAG,GAAG,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE;AACzE;AAGO,SAAS,mBAAmB,KAAuB;AACxD,SAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,cAAc;AAC/D;;;AClFO,IAAM,YAAwB,OAAO,OAAO,EAAE,OAAO,MAAM,UAAU,MAAM,OAAO,KAAK,CAAC;AAExF,SAAS,iBAAiB,UAA8C;AAC7E,MAAI,aAAa,OAAW,QAAO;AACnC,SAAO;AAAA,IACL,OAAO,SAAS,SAAS,OAAO;AAAA,IAChC,UAAU,SAAS,SAAS,UAAU;AAAA,IACtC,OAAO,SAAS,SAAS,OAAO;AAAA,EAClC;AACF;;;ACrBA,eAAsB,4BAA2D;AAC/E,MAAI;AACJ,QAAM,UAAU,WAAW;AAC3B,MAAI,SAAS,uBAAuB,CAAC,QAAQ,SAAS;AAGpD,UAAM,OAAO,YAAY,sBAAsB,CAAC,CAAC;AACjD,SAAK;AAAA,MACH,WAAW;AAAA,MACX,MAAM;AAAA,QACJ,MAAM,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK,cAAc;AAAA,QAC/B,cAAc,KAAK;AAAA,MACrB;AAAA,IACF;AAAA,EACF,OAAO;AACL,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,CAAC;AAAA,IACjD,QAAQ;AACN,aAAO,EAAE,MAAM,IAAI,UAAU,YAAY;AAAA,IAC3C;AACA,QAAI,CAAC,OAAO,GAAI,QAAO,EAAE,MAAM,IAAI,UAAU,YAAY;AACzD,SAAK,OAAO;AAAA,EACd;AAQA,QAAM,cAAsB,WAAW,GAAG,eACtC,cACE,GAAG,aAAwB;AACjC,QAAM,WAAqB,gBAAgB,cAAc,cAAc;AACvE,QAAM,OAAO,GAAG;AAChB,QAAM,QAAkB,CAAC;AAEzB,QAAM,KAAK,iBAAiB;AAC5B,MAAI,aAAa,iBAAiB;AAChC,UAAM;AAAA,MACJ,gBAAgB,YACZ,qCACA;AAAA,IACN;AAIA,UAAM,KAAK,cAAc,GAAG,WAAW,QAAQ,SAAS,EAAE;AAAA,EAC5D,OAAO;AACL,UAAM,KAAK,uDAAuD;AAClE,QAAI,GAAG,WAAW;AAChB,YAAM,KAAK,cAAc,GAAG,UAAU,IAAI,EAAE;AAAA,IAC9C;AAAA,EACF;AACA,QAAM,KAAK,SAAS,KAAK,IAAI,UAAU,KAAK,IAAI,GAAG;AACnD,MAAI,KAAK,eAAe,MAAM;AAC5B,UAAM,KAAK,mBAAmB,KAAK,UAAU,WAAW;AAAA,EAC1D,OAAO;AACL,UAAM,KAAK,sBAAsB;AAAA,EACnC;AACA,MAAI,KAAK,eAAe,MAAM;AAC5B,UAAM,KAAK,eAAe,KAAK,UAAU,QAAQ;AAAA,EACnD,OAAO;AACL,UAAM,KAAK,kBAAkB;AAAA,EAC/B;AACA,MAAI,KAAK,iBAAiB,OAAO;AAC/B,UAAM,KAAK,2CAA2C;AAAA,EACxD;AACA,MAAI,aAAa,aAAa;AAG5B,UAAM,KAAK;AAAA,+EAAkF;AAC7F,UAAM,KAAK,mBAAmB;AAAA,EAChC;AAEA,SAAO,EAAE,MAAM,MAAM,KAAK,IAAI,GAAG,SAAS;AAC5C;AAEA,eAAsB,oBAAqC;AACzD,QAAM,EAAE,KAAK,IAAI,MAAM,0BAA0B;AACjD,SAAO;AACT;","names":[]}

package/dist/{chunk-VSSV3IOU.js → chunk-BSOX2NKO.js}

@@ -1,7 +1,7 @@
 import {
   FULL_CAPS,
   getSessionContext
-} from "./chunk-EFPJA3JE.js";
+} from "./chunk-4E36KN6D.js";
 import {
   ALL_VARIANTS,
   FORM_TYPES,
@@ -155,4 +155,4 @@ export {
   getGuideUri,
   registerResources
 };
-//# sourceMappingURL=chunk-VSSV3IOU.js.map
+//# sourceMappingURL=chunk-BSOX2NKO.js.map

package/dist/{chunk-D4Q5ZWFO.js → chunk-W2TAUCPB.js}

@@ -1,7 +1,7 @@
 import {
   FULL_CAPS,
   getSessionContextWithAuth
-} from "./chunk-EFPJA3JE.js";
+} from "./chunk-4E36KN6D.js";
 import {
   FORM_TYPES,
   WORKFLOW_TYPES,
@@ -15231,4 +15231,4 @@ export {
   getWorkflowText,
   registerPrompts
 };
-//# sourceMappingURL=chunk-D4Q5ZWFO.js.map
+//# sourceMappingURL=chunk-W2TAUCPB.js.map

package/dist/{chunk-HV5FRLYK.js → chunk-X3S2OLX6.js}

@@ -29,7 +29,7 @@ import {
   union,
   unknown,
   url
-} from "./chunk-D4Q5ZWFO.js";
+} from "./chunk-W2TAUCPB.js";
 import {
   GUIDE_TYPES,
   QUIZ_VARIANTS,
@@ -38,7 +38,7 @@ import {
   getGuideUri,
   guideFallbackText,
   registerResources
-} from "./chunk-VSSV3IOU.js";
+} from "./chunk-BSOX2NKO.js";
 import {
   ANON_PREVIEW_LINK_LABEL,
   ANON_PREVIEW_NOTICE,
@@ -47,11 +47,12 @@ import {
   PREVIEW_URL_DESCRIPTION,
   anonPreviewNotice,
   capsFromToolsets,
+  isAnonymousSession,
   isConnectorGuest,
   isPreviewViewerUrl,
   previewOnlyNotice,
   withAdoptedNotice
-} from "./chunk-EFPJA3JE.js";
+} from "./chunk-4E36KN6D.js";
 import {
   ACTIVE_NODE_TYPES,
   ANON_MCP_BLOCKED_NODE_TYPES,
@@ -16475,8 +16476,9 @@ Example: A form that asks a question, collects contact info, then finishes:
         );
       }
       planContext = {
-        auth_mode: me.auth_mode ?? "anonymous",
-        is_authenticated: me.auth_mode != null && me.auth_mode !== "anonymous",
+        // /me says "api_key" for the anonymous MCP lane (bot key): the auth context is the truth.
+        auth_mode: isAnonymousSession() ? "anonymous" : me.auth_mode ?? "anonymous",
+        is_authenticated: me.auth_mode != null && me.auth_mode !== "anonymous" && !isAnonymousSession(),
         workspace_id: workspaceId,
         workspace_name: me.workspace?.name ?? null,
         plan_name: me.plan?.name ?? "Free",
@@ -16814,7 +16816,7 @@ function registerImportFormTool(server) {
       }
       const me = meResult.data;
       const workspaceId = me.workspace?.id ?? null;
-      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" ? me.workspace?.name ?? void 0 : void 0;
+      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" && !isAnonymousSession() ? me.workspace?.name ?? void 0 : void 0;
       if (!workspaceId) {
         return errorResult(
           "No workspace available. This usually means authentication is misconfigured - check your API key or OAuth connection."
@@ -18160,7 +18162,7 @@ Provide media via \`items\` (explicit type + URL), \`files\` (files attached by
       }
       const me = meResult.data;
       const workspaceId = me.workspace?.id ?? null;
-      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" ? me.workspace?.name ?? void 0 : void 0;
+      const workspaceName = me.auth_mode && me.auth_mode !== "anonymous" && !isAnonymousSession() ? me.workspace?.name ?? void 0 : void 0;
       if (!workspaceId) {
         return errorResult(
           "No workspace available. This usually means authentication is misconfigured - check your API key or OAuth connection."
@@ -20350,4 +20352,4 @@ export {
   * MIT Licensed
   *)
 */
-//# sourceMappingURL=chunk-HV5FRLYK.js.map
+//# sourceMappingURL=chunk-X3S2OLX6.js.map