@alpic-ai/api 1.161.0 → 1.163.0

package/dist/index.mjs

@@ -2,7 +2,7 @@ import { z } from "zod";
 import * as z$1 from "zod/v4";
 import { oc } from "@orpc/contract";
 import ms from "ms";
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
 /**
 * Reusable URL validation that disallows javascript: scheme
 */
@@ -283,33 +283,18 @@ const deploymentSummarySchema = z.object({
 	createdAt: z.coerce.date(),
 	updatedAt: z.coerce.date()
 });
-/**
-* Public environment
-*
-* Answers anonymously and exposes no OAuth metadata.
-*/
+/** Public environment: answers anonymously and exposes no OAuth metadata. */
 const publicEnvironmentSchema = z.object({
 	allowsAnonymous: z.literal(true),
 	oAuthMetadata: z.strictObject({})
 });
-/**
-* Protected environment with an external resource metadata URL
-*
-* An external resource metadata URL is returned in the WWW-Authenticate header during the first 401 response.
-* Everything that follows is handled outside of the MCP server scope.
-*/
+/** Protected environment whose external resource metadata URL is returned in the WWW-Authenticate header on the first 401; everything after is handled outside the MCP server scope. */
 const externalResourceMetadataEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
 	scope: z.string().optional()
 });
-/**
-* Protected environment with an external authorization server URL
-*
-* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
-* An external authorization server URL is returned when requesting the endpoint.
-* Everything that follows is handled outside of the MCP server scope.
-*/
+/** Protected environment whose own /.well-known/oauth-protected-resource endpoint points at an external authorization server; everything after is handled outside the MCP server scope. */
 const externalAuthorizationServerEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({
@@ -318,12 +303,7 @@ const externalAuthorizationServerEnvironmentSchema = z.object({
 	}),
 	scope: z.string().optional()
 });
-/**
-* Standalone protected environment
-*
-* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
-* The server itself exposes the /.well-known/oauth-authorization-server endpoint.
-*/
+/** Standalone protected environment: the server itself exposes both the /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server endpoints. */
 const standaloneEnvironmentSchema = z.object({
 	allowsAnonymous: z.boolean(),
 	oAuthMetadata: z.object({
@@ -332,13 +312,7 @@ const standaloneEnvironmentSchema = z.object({
 	}),
 	scope: z.string().optional()
 });
-/**
-* Protected environment without OAuth discovery
-*
-* The server enforces authentication but exposes no OAuth discovery metadata.
-* Neither /.well-known/oauth-protected-resource nor /.well-known/oauth-authorization-server
-* are advertised. Clients must obtain credentials out-of-band.
-*/
+/** Protected environment that enforces authentication but advertises no OAuth discovery metadata; clients must obtain credentials out-of-band. */
 const protectedWithoutDiscoveryEnvironmentSchema = z.object({
 	allowsAnonymous: z.literal(false),
 	oAuthMetadata: z.strictObject({}),
@@ -533,6 +507,246 @@ z.enum([
 	"DEBUG",
 	"ERROR"
 ]);
+/** Only names a vendor actually ships belong here: lookalikes like `claude-code-test` are customers' own scripts. */
+const MCP_CLIENT_GROUPS = [
+	{
+		id: "claude_code",
+		label: "Claude Code",
+		vendor: "anthropic",
+		rawNames: ["claude-code", "Anthropic/ClaudeCodeDesktop"]
+	},
+	{
+		id: "claude",
+		label: "Claude",
+		vendor: "anthropic",
+		rawNames: [
+			"Anthropic/ClaudeAI",
+			"claude-ai",
+			"claude",
+			"Claude",
+			"claude-desktop",
+			"claude-desktop-3p"
+		]
+	},
+	{
+		id: "claude_mobile",
+		label: "Claude mobile",
+		vendor: "anthropic",
+		rawNames: ["claude-ios", "ClaudeAndroid"]
+	},
+	{
+		id: "claude_cowork",
+		label: "Claude Cowork",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/Cowork"]
+	},
+	{
+		id: "claude_toolbox",
+		label: "Claude Toolbox",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/Toolbox", "Anthropic/toolbox-bootstrap"]
+	},
+	{
+		id: "anthropic_api",
+		label: "Anthropic API",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/API"]
+	},
+	{
+		id: "anthropic_connector_refresh",
+		label: "Anthropic (connector refresh)",
+		vendor: "anthropic",
+		rawNames: ["Anthropic"]
+	},
+	{
+		id: "codex",
+		label: "Codex",
+		vendor: "openai",
+		rawNames: [
+			"codex-mcp-client",
+			"codex",
+			"Codex",
+			"codex-cli",
+			"openai-mcp (Codex)"
+		]
+	},
+	{
+		id: "chatgpt",
+		label: "ChatGPT",
+		vendor: "openai",
+		rawNames: ["openai-mcp (ChatGPT)"]
+	},
+	{
+		id: "openai_responses_api",
+		label: "OpenAI Responses API",
+		vendor: "openai",
+		rawNames: ["openai-mcp (Responses API)"]
+	},
+	{
+		id: "openai_agent_builder",
+		label: "OpenAI Agent Builder",
+		vendor: "openai",
+		rawNames: ["openai-mcp (Agent Builder)"]
+	},
+	{
+		id: "openai_other",
+		label: "OpenAI Other",
+		vendor: "openai",
+		rawNames: ["openai-mcp"]
+	},
+	{
+		id: "cursor",
+		label: "Cursor",
+		vendor: "cursor",
+		rawNames: [
+			"cursor-vscode",
+			"Cursor",
+			"cursor"
+		]
+	},
+	{
+		id: "cline",
+		label: "Cline",
+		vendor: "cline",
+		rawNames: [
+			"Cline",
+			"cline",
+			"@cline/core"
+		]
+	},
+	{
+		id: "github_copilot",
+		label: "GitHub Copilot",
+		vendor: "githubCopilot",
+		rawNames: [
+			"Copilot",
+			"github-copilot-developer",
+			"Copilot MCP Gateway",
+			"Xcode/copilot-xcode"
+		]
+	},
+	{
+		id: "gemini_cli",
+		label: "Gemini CLI",
+		vendor: "google",
+		rawNames: ["gemini-cli-mcp-client", "gemini-cli"]
+	},
+	{
+		id: "antigravity",
+		label: "Antigravity",
+		vendor: "google",
+		rawNames: ["antigravity-client"]
+	},
+	{
+		id: "gemini",
+		label: "Gemini",
+		vendor: "google",
+		rawNames: ["Gemini", "google-ai-edge-gallery"]
+	},
+	{
+		id: "windsurf",
+		label: "Windsurf",
+		vendor: "windsurf",
+		rawNames: ["Windsurf", "windsurf-client"]
+	},
+	{
+		id: "mistral",
+		label: "Mistral / Le Chat",
+		vendor: "mistral",
+		rawNames: ["Mistral"],
+		rawNamePrefixes: ["connector:custom-mcp:"]
+	},
+	{
+		id: "n8n",
+		label: "n8n",
+		vendor: "n8n",
+		rawNames: [
+			"@n8n/n8n-nodes-langchain.mcpClient",
+			"@n8n/n8n-nodes-langchain.mcpClientTool",
+			"n8n"
+		]
+	},
+	{
+		id: "alpic_playground",
+		label: "Alpic Playground",
+		vendor: "alpic",
+		rawNames: ["alpic-playground", "playground"]
+	},
+	{
+		id: "opencode",
+		label: "opencode",
+		vendor: "opencode",
+		rawNames: ["opencode"]
+	},
+	{
+		id: "zed",
+		label: "Zed",
+		vendor: "zed",
+		rawNames: ["Zed", "zed"]
+	},
+	{
+		id: "zapier",
+		label: "Zapier",
+		vendor: "zapier",
+		rawNames: ["Zapier", "zapier"]
+	},
+	{
+		id: "make",
+		label: "Make",
+		vendor: "make",
+		rawNames: ["Make", "make"]
+	},
+	{
+		id: "librechat",
+		label: "LibreChat",
+		vendor: "mcp",
+		rawNames: ["LibreChat", "librechat"]
+	},
+	{
+		id: "jan",
+		label: "Jan",
+		vendor: "mcp",
+		rawNames: ["Jan", "jan"]
+	},
+	{
+		id: "goose",
+		label: "goose",
+		vendor: "mcp",
+		rawNames: ["goose", "Goose"]
+	},
+	{
+		id: "mcphost",
+		label: "mcphost",
+		vendor: "mcp",
+		rawNames: ["mcphost"]
+	},
+	{
+		id: "mcporter",
+		label: "mcporter",
+		vendor: "mcp",
+		rawNames: ["mcporter"]
+	},
+	{
+		id: "rmcp",
+		label: "rmcp",
+		vendor: "mcp",
+		rawNames: ["rmcp"]
+	},
+	{
+		id: "unnamed_client",
+		label: "Unnamed client",
+		vendor: "mcp",
+		rawNames: [
+			"mcp",
+			"unknown",
+			""
+		]
+	}
+];
+/** A source pattern, not a RegExp, because analytics renders the same rule into ClickHouse RE2, which shares this syntax. */
+const MCP_REMOTE_WRAPPER_SUFFIX = String.raw` \(via mcp-remote [^\n]+?\)$`;
+new RegExp(MCP_REMOTE_WRAPPER_SUFFIX);
+new Map(MCP_CLIENT_GROUPS.map((group) => [group.id, group]));
 const runtimeSchema = z.enum([
 	"python3.13",
 	"python3.14",
@@ -610,15 +824,7 @@ z.object({
 	serverFields: serverFieldsSchema$1,
 	source: z.enum(["registry", "defaults"])
 });
-/**
-* Returns a variant of a `maxLength`-constrained string that clamps (truncates) instead of
-* rejecting on overflow — used for AI-generated copy where the model routinely overshoots.
-*
-* NOTE: this rebuilds the schema from scratch, carrying over only `maxLength` (as a clamp),
-* `minLength`, and the description. Any other validators on the source field (`.regex()`,
-* `.email()`, custom refinements) are intentionally dropped — this helper is meant for plain
-* free-text length caps only. A field with `null` `maxLength` is returned unchanged.
-*/
+/** Clamps instead of rejecting on max-length overflow (for AI-generated copy that overshoots); intentionally carries over only maxLength, minLength, and description, dropping any other validators. */
 const clampStringField = (field) => {
 	const max = field.maxLength;
 	if (max === null) return field;
@@ -964,11 +1170,7 @@ const chatgptToolJustificationSchema = z.object({
 	openWorldJustification: z.string().describe("One sentence on whether the tool reaches external systems beyond your own service."),
 	destructiveJustification: z.string().describe("One sentence on whether the tool changes data. For a read-only tool, state the full triad: \"No data is created, modified, or deleted.\"")
 }).describe("Per-tool justification of each MCP annotation value (one specific sentence per hint).");
-/**
-* Base copy fields, defined once and reused by both the submission form and per-locale
-* translations so the constraints (tagline ≤ 30 chars) never drift. The translation generation
-* path wraps these in {@link clampStringField} since the LLM tends to overshoot the limit.
-*/
+/** Defined once and reused by both the submission form and per-locale translations so the tagline ≤ 30 chars constraint never drifts. */
 const chatgptTaglineSchema = z.string().max(30);
 const chatgptDescriptionSchema = z.string();
 const chatgptTranslationSchema = z.object({
@@ -977,10 +1179,7 @@ const chatgptTranslationSchema = z.object({
 	description: chatgptDescriptionSchema
 }).describe("Locale-scoped override for tagline + description. English (US) is the default.");
 chatgptTranslationSchema.extend({ tagline: clampStringField(chatgptTaglineSchema) });
-/**
-* Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section.
-* When adding/removing/reordering fields, keep this in sync with the sheet.
-*/
+/** Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section; keep it in sync with the sheet. */
 const chatgptSubmissionFormDataSchema = z.object({
 	logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
 	logoDark: z.string().optional().describe("Optional dark-mode logo icon. Square PNG, same specs as the light icon. Leave empty if the light icon also works on dark backgrounds."),
@@ -1077,11 +1276,7 @@ const claudePolicyAcknowledgementSchema = z.enum([
 	"My connector does not collect conversation data beyond what is needed for its function.",
 	"Public documentation for this connector will be live by the publish date."
 ]);
-/**
-* Field order mirrors the claude.ai directory submission wizard
-* (`claude.ai/admin-settings/directory/submissions/new`), grouped by step.
-* When adding/removing/reordering fields, keep this in sync with the wizard.
-*/
+/** Field order mirrors the claude.ai directory submission wizard (`claude.ai/admin-settings/directory/submissions/new`), grouped by step; keep it in sync with the wizard. */
 const claudeSubmissionFormDataSchema = z.object({
 	serverUrl: z.url().describe(`The full https:// URL where your MCP server is hosted and reachable. In the claude.ai wizard this is read live
 from the custom connector you select — the connection is used to verify the URL and the tool list at submission time.
@@ -1173,12 +1368,7 @@ claudeSubmissionFormDataSchema.pick({
 	connectionRequirements: claudeSubmissionFormDataSchema.shape.connectionRequirements.optional(),
 	testInstructions: claudeSubmissionFormDataSchema.shape.testInstructions.optional()
 });
-/**
-* Narrative fields the LLM-backed generation step produces for Claude submissions.
-* This schema accepts the slightly loose shape returned by AI generation, then normalizes it into
-* the strict form shape. Keep transforms here rather than in callers so generation leniency is
-* colocated with the Claude contract.
-*/
+/** Loose shape returned by AI generation for Claude narrative fields; transforms live here so generation leniency stays colocated with the Claude contract. */
 const claudeAiGeneratedFormDataRawSchema = z.object({
 	oneLiner: claudeSubmissionFormDataSchema.shape.oneLiner,
 	description: claudeSubmissionFormDataSchema.shape.description,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpic-ai/api",
-  "version": "1.161.0",
+  "version": "1.163.0",
   "description": "Contract for the Alpic API",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -33,13 +33,13 @@
   "author": "Alpic",
   "license": "ISC",
   "dependencies": {
-    "@orpc/contract": "^1.14.10",
+    "@orpc/contract": "^1.14.13",
     "ms": "^2.1.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@orpc/openapi": "^1.14.10",
-    "@orpc/zod": "^1.14.10",
+    "@orpc/openapi": "^1.14.13",
+    "@orpc/zod": "^1.14.13",
     "@total-typescript/tsconfig": "^1.0.4",
     "@types/ms": "^2.1.0",
     "shx": "^0.4.0",