@alpic-ai/api 1.161.0 → 1.162.0

package/dist/index.mjs

@@ -2,7 +2,7 @@ import { z } from "zod";
 import * as z$1 from "zod/v4";
 import { oc } from "@orpc/contract";
 import ms from "ms";
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
 /**
 * Reusable URL validation that disallows javascript: scheme
 */
@@ -283,33 +283,18 @@ const deploymentSummarySchema = z.object({
 	createdAt: z.coerce.date(),
 	updatedAt: z.coerce.date()
 });
-/**
-* Public environment
-*
-* Answers anonymously and exposes no OAuth metadata.
-*/
+/** Public environment: answers anonymously and exposes no OAuth metadata. */
 const publicEnvironmentSchema = z.object({
 	allowsAnonymous: z.literal(true),
 	oAuthMetadata: z.strictObject({})
 });
-/**
-* Protected environment with an external resource metadata URL
-*
-* An external resource metadata URL is returned in the WWW-Authenticate header during the first 401 response.
-* Everything that follows is handled outside of the MCP server scope.
-*/
+/** Protected environment whose external resource metadata URL is returned in the WWW-Authenticate header on the first 401; everything after is handled outside the MCP server scope. */
 const externalResourceMetadataEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
 	scope: z.string().optional()
 });
-/**
-* Protected environment with an external authorization server URL
-*
-* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
-* An external authorization server URL is returned when requesting the endpoint.
-* Everything that follows is handled outside of the MCP server scope.
-*/
+/** Protected environment whose own /.well-known/oauth-protected-resource endpoint points at an external authorization server; everything after is handled outside the MCP server scope. */
 const externalAuthorizationServerEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({
@@ -318,12 +303,7 @@ const externalAuthorizationServerEnvironmentSchema = z.object({
 	}),
 	scope: z.string().optional()
 });
-/**
-* Standalone protected environment
-*
-* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
-* The server itself exposes the /.well-known/oauth-authorization-server endpoint.
-*/
+/** Standalone protected environment: the server itself exposes both the /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server endpoints. */
 const standaloneEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({
@@ -332,13 +312,7 @@ const standaloneEnvironmentSchema = z.object({
 	}),
 	scope: z.string().optional()
 });
-/**
-* Protected environment without OAuth discovery
-*
-* The server enforces authentication but exposes no OAuth discovery metadata.
-* Neither /.well-known/oauth-protected-resource nor /.well-known/oauth-authorization-server
-* are advertised. Clients must obtain credentials out-of-band.
-*/
+/** Protected environment that enforces authentication but advertises no OAuth discovery metadata; clients must obtain credentials out-of-band. */
 const protectedWithoutDiscoveryEnvironmentSchema = z.object({
 	allowsAnonymous: z.literal(false),
 	oAuthMetadata: z.strictObject({}),
@@ -610,15 +584,7 @@ z.object({
 	serverFields: serverFieldsSchema$1,
 	source: z.enum(["registry", "defaults"])
 });
-/**
-* Returns a variant of a `maxLength`-constrained string that clamps (truncates) instead of
-* rejecting on overflow — used for AI-generated copy where the model routinely overshoots.
-*
-* NOTE: this rebuilds the schema from scratch, carrying over only `maxLength` (as a clamp),
-* `minLength`, and the description. Any other validators on the source field (`.regex()`,
-* `.email()`, custom refinements) are intentionally dropped — this helper is meant for plain
-* free-text length caps only. A field with `null` `maxLength` is returned unchanged.
-*/
+/** Clamps instead of rejecting on max-length overflow (for AI-generated copy that overshoots); intentionally carries over only maxLength, minLength, and description, dropping any other validators. */
 const clampStringField = (field) => {
 	const max = field.maxLength;
 	if (max === null) return field;
@@ -964,11 +930,7 @@ const chatgptToolJustificationSchema = z.object({
 	openWorldJustification: z.string().describe("One sentence on whether the tool reaches external systems beyond your own service."),
 	destructiveJustification: z.string().describe("One sentence on whether the tool changes data. For a read-only tool, state the full triad: \"No data is created, modified, or deleted.\"")
 }).describe("Per-tool justification of each MCP annotation value (one specific sentence per hint).");
-/**
-* Base copy fields, defined once and reused by both the submission form and per-locale
-* translations so the constraints (tagline ≤ 30 chars) never drift. The translation generation
-* path wraps these in {@link clampStringField} since the LLM tends to overshoot the limit.
-*/
+/** Defined once and reused by both the submission form and per-locale translations so the tagline ≤ 30 chars constraint never drifts. */
 const chatgptTaglineSchema = z.string().max(30);
 const chatgptDescriptionSchema = z.string();
 const chatgptTranslationSchema = z.object({
@@ -977,10 +939,7 @@ const chatgptTranslationSchema = z.object({
 	description: chatgptDescriptionSchema
 }).describe("Locale-scoped override for tagline + description. English (US) is the default.");
 chatgptTranslationSchema.extend({ tagline: clampStringField(chatgptTaglineSchema) });
-/**
-* Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section.
-* When adding/removing/reordering fields, keep this in sync with the sheet.
-*/
+/** Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section; keep it in sync with the sheet. */
 const chatgptSubmissionFormDataSchema = z.object({
 	logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
 	logoDark: z.string().optional().describe("Optional dark-mode logo icon. Square PNG, same specs as the light icon. Leave empty if the light icon also works on dark backgrounds."),
@@ -1077,11 +1036,7 @@ const claudePolicyAcknowledgementSchema = z.enum([
 	"My connector does not collect conversation data beyond what is needed for its function.",
 	"Public documentation for this connector will be live by the publish date."
 ]);
-/**
-* Field order mirrors the claude.ai directory submission wizard
-* (`claude.ai/admin-settings/directory/submissions/new`), grouped by step.
-* When adding/removing/reordering fields, keep this in sync with the wizard.
-*/
+/** Field order mirrors the claude.ai directory submission wizard (`claude.ai/admin-settings/directory/submissions/new`), grouped by step; keep it in sync with the wizard. */
 const claudeSubmissionFormDataSchema = z.object({
 	serverUrl: z.url().describe(`The full https:// URL where your MCP server is hosted and reachable. In the claude.ai wizard this is read live
 from the custom connector you select — the connection is used to verify the URL and the tool list at submission time.
@@ -1173,12 +1128,7 @@ claudeSubmissionFormDataSchema.pick({
 	connectionRequirements: claudeSubmissionFormDataSchema.shape.connectionRequirements.optional(),
 	testInstructions: claudeSubmissionFormDataSchema.shape.testInstructions.optional()
 });
-/**
-* Narrative fields the LLM-backed generation step produces for Claude submissions.
-* This schema accepts the slightly loose shape returned by AI generation, then normalizes it into
-* the strict form shape. Keep transforms here rather than in callers so generation leniency is
-* colocated with the Claude contract.
-*/
+/** Loose shape returned by AI generation for Claude narrative fields; transforms live here so generation leniency stays colocated with the Claude contract. */
 const claudeAiGeneratedFormDataRawSchema = z.object({
 	oneLiner: claudeSubmissionFormDataSchema.shape.oneLiner,
 	description: claudeSubmissionFormDataSchema.shape.description,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpic-ai/api",
-  "version": "1.161.0",
+  "version": "1.162.0",
   "description": "Contract for the Alpic API",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -33,13 +33,13 @@
   "author": "Alpic",
   "license": "ISC",
   "dependencies": {
-    "@orpc/contract": "^1.14.10",
+    "@orpc/contract": "^1.14.13",
     "ms": "^2.1.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@orpc/openapi": "^1.14.10",
-    "@orpc/zod": "^1.14.10",
+    "@orpc/openapi": "^1.14.13",
+    "@orpc/zod": "^1.14.13",
     "@total-typescript/tsconfig": "^1.0.4",
     "@types/ms": "^2.1.0",
     "shx": "^0.4.0",