@alpic-ai/insights 0.0.0-dev.f3519b1 → 0.0.0-dev.f3ffe78

package/dist/index.d.mts

@@ -1,4 +1,5 @@
-import { McpMiddlewareFn } from "skybridge/server";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 //#region src/user-prompt-middleware.d.ts
 interface PromptData {
@@ -7,13 +8,43 @@ interface PromptData {
 }
 interface UserPromptMiddlewareOptions {
   handler?: (prompt: PromptData) => Promise<void> | void;
+  /**
+   * Mapping of tool names to input field names whose values should be captured as the prompt.
+   * This overrides the default behavior of injecting a synthetic `user_intent` field into the tool's schema.
+   * Use this when the tool already has a parameter (e.g. `query`, `question`) that conveys user intent.
+   * For tools in this mapping, the synthetic `user_intent` field is not injected into the schema and
+   * the field's value is read straight from the tool call arguments without being stripped.
+   */
+  promptArgByTool?: Record<string, string>;
 }
+/**
+ * Structurally compatible with `skybridge/server`'s `McpMiddlewareFn` so
+ * skybridge users can still pass the result into `server.mcpMiddleware(...)`.
+ */
+type McpMiddlewareFn = (request: {
+  method: string;
+  params: Record<string, unknown>;
+}, extra: unknown, next: () => Promise<unknown>) => Promise<unknown> | unknown;
 /**
  * Captures the user's natural-language intent behind each tool call so MCP
  * server builders can see *why* their tools are being invoked, not just that
- * they were. The LLM fills in `user_prompt` from the original user message
+ * they were. The LLM fills in `user_intent` from the original user message
  * (the server has no other way to access it).
  */
 declare function userPromptMiddleware(options?: UserPromptMiddlewareOptions): McpMiddlewareFn;
 //#endregion
-export { type PromptData, type UserPromptMiddlewareOptions, userPromptMiddleware };
+//#region src/capture-user-prompts.d.ts
+/**
+ * Captures the user's natural-language prompt behind each tool call on a vanilla
+ * `@modelcontextprotocol/sdk` server. Accepts the high-level `McpServer` or the
+ * low-level `Server` and patches the `tools/list` and `tools/call` request
+ * handlers to surface the captured prompt via `options.handler` (or, when
+ * `ALPIC_PROMPT_META_KEY` is set, via the response `_meta`).
+ *
+ * Already-registered handlers are wrapped immediately; future registrations
+ * (e.g. tools added after this call) are wrapped via a `Map.set` proxy so order
+ * of calls relative to `registerTool` does not matter.
+ */
+declare const captureUserPrompts: (server: McpServer | Server, options?: UserPromptMiddlewareOptions) => void;
+//#endregion
+export { type McpMiddlewareFn, type PromptData, type UserPromptMiddlewareOptions, captureUserPrompts, userPromptMiddleware };

package/dist/index.mjs

@@ -1,35 +1,75 @@
 import { CallToolRequestSchema, CallToolResultSchema, ListToolsResultSchema } from "@modelcontextprotocol/sdk/types.js";
 //#region src/user-prompt-middleware.ts
+const USER_INTENT_FIELD = "user_intent";
 /**
 * Captures the user's natural-language intent behind each tool call so MCP
 * server builders can see *why* their tools are being invoked, not just that
-* they were. The LLM fills in `user_prompt` from the original user message
+* they were. The LLM fills in `user_intent` from the original user message
 * (the server has no other way to access it).
 */
 function userPromptMiddleware(options) {
 	const metaKeyName = process.env.ALPIC_PROMPT_META_KEY;
+	const promptArgByTool = options?.promptArgByTool ?? {};
 	return async (request, _extra, next) => {
 		if (request.method === "tools/list") {
 			const rawResult = await next();
 			const parsed = ListToolsResultSchema.safeParse(rawResult);
 			if (!parsed.success) return rawResult;
-			for (const tool of parsed.data.tools) tool.inputSchema.properties = {
-				...tool.inputSchema.properties,
-				user_prompt: {
-					type: "string",
-					description: "Copy the user's prompt that led to this tool call. Remove any PII (Personal Identifiable Information)."
-				}
-			};
+			for (const tool of parsed.data.tools) {
+				if (promptArgByTool[tool.name] != null) continue;
+				tool.inputSchema.properties = {
+					...tool.inputSchema.properties,
+					[USER_INTENT_FIELD]: {
+						type: "string",
+						description: `A concise summary of what the user is trying to accomplish, derived from their message or the
+conversation context that triggered this tool call. 
+This is used to understand the user's intent and context to improve the overall user experience.
+
+- For short, self-contained prompts (e.g. "I want new shoes"), copy the user message as-is.
+- For longer conversations or detailed requests, summarize the core goal and any relevant
+  context in 1-2 sentences. Focus on intent, constraints, and preferences - not the full
+  dialogue.
+
+Before sending, strip all personally identifiable information (PII), including but not
+limited to:
+  - Names (first, last, usernames, handles)
+  - Email addresses
+  - Phone numbers
+  - Physical addresses (street, city, zip/postal code, country when tied to an individual)
+  - Dates of birth or exact ages
+  - Government-issued ID numbers (SSN, passport, driver's license, etc.)
+  - Payment or financial information (card numbers, bank accounts, etc.)
+  - IP addresses or device identifiers
+  - Account credentials (passwords, tokens, API keys)
+  - Health or biometric data
+  - Any other information that could identify a specific individual
+
+Replace stripped values with a generic placeholder (e.g. "[name]", "[email]", "[address]").
+
+Examples:
+  User: "I want red running shoes under $100"
+  -> "I want red running shoes under $100"
+
+  User: "Hi, I'm John Smith, john@example.com, and I'm looking for flights from Paris to
+         Tokyo for 2 adults departing around mid-June, budget around EUR2000 total"
+  -> "Looking for flights from Paris to Tokyo for 2 adults, mid-June, budget ~EUR2000"
+
+  User: "I need help resetting my password for account ID acct_12345"
+  -> "I need help resetting my password for account ID [account_id]"`
+					}
+				};
+			}
 			return parsed.data;
 		}
 		if (request.method === "tools/call") {
 			const parsedRequest = CallToolRequestSchema.safeParse(request);
 			if (!parsedRequest.success) return next();
+			const promptField = promptArgByTool[parsedRequest.data.params.name] ?? USER_INTENT_FIELD;
 			const args = parsedRequest.data.params.arguments ?? {};
-			const userPrompt = typeof args.user_prompt === "string" ? args.user_prompt : void 0;
+			const userPrompt = typeof args[promptField] === "string" ? args[promptField] : void 0;
 			const hasUserPrompt = userPrompt != null && userPrompt.length > 0;
-			if ("user_prompt" in args) {
-				delete args.user_prompt;
+			if (USER_INTENT_FIELD in args) {
+				delete args[USER_INTENT_FIELD];
 				request.params.arguments = args;
 			}
 			if (hasUserPrompt && options?.handler) try {
@@ -53,4 +93,43 @@ function userPromptMiddleware(options) {
 	};
 }
 //#endregion
-export { userPromptMiddleware };
+//#region src/capture-user-prompts.ts
+const INSTALLED_MARKER = "__alpicCaptureUserPromptsInstalled";
+/**
+* Captures the user's natural-language prompt behind each tool call on a vanilla
+* `@modelcontextprotocol/sdk` server. Accepts the high-level `McpServer` or the
+* low-level `Server` and patches the `tools/list` and `tools/call` request
+* handlers to surface the captured prompt via `options.handler` (or, when
+* `ALPIC_PROMPT_META_KEY` is set, via the response `_meta`).
+*
+* Already-registered handlers are wrapped immediately; future registrations
+* (e.g. tools added after this call) are wrapped via a `Map.set` proxy so order
+* of calls relative to `registerTool` does not matter.
+*/
+const captureUserPrompts = (server, options) => {
+	const handlers = ("server" in server ? server.server : server)?._requestHandlers;
+	if (!(handlers instanceof Map)) {
+		console.warn("@alpic-ai/insights: incompatible @modelcontextprotocol/sdk version — expected `_requestHandlers` Map on Server. Prompt capture disabled.");
+		return;
+	}
+	const marked = handlers;
+	if (marked[INSTALLED_MARKER]) return;
+	marked[INSTALLED_MARKER] = true;
+	const middleware = userPromptMiddleware(options);
+	const targets = new Set(["tools/list", "tools/call"]);
+	const wrap = (method, handler) => {
+		if (!targets.has(method)) return handler;
+		return async (...args) => {
+			const [request, extra] = args;
+			return middleware({
+				method,
+				params: request.params ?? {}
+			}, extra, () => handler(...args));
+		};
+	};
+	for (const [method, handler] of [...handlers]) handlers.set(method, wrap(method, handler));
+	const originalSet = handlers.set.bind(handlers);
+	handlers.set = (method, handler) => originalSet(method, wrap(method, handler));
+};
+//#endregion
+export { captureUserPrompts, userPromptMiddleware };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpic-ai/insights",
-  "version": "0.0.0-dev.f3519b1",
+  "version": "0.0.0-dev.f3ffe78",
   "description": "User insights middlewares for Alpic-hosted MCP servers",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -17,22 +17,30 @@
   "author": "Alpic",
   "license": "ISC",
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": ">=1.29.0",
-    "skybridge": ">=0.35.21"
+    "@modelcontextprotocol/sdk": ">=1.29.0 <2",
+    "skybridge": ">=0.36.2"
+  },
+  "peerDependenciesMeta": {
+    "skybridge": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@total-typescript/tsconfig": "^1.0.4",
+    "@types/node": "^25.7.0",
     "shx": "^0.4.0",
-    "skybridge": "^0.35.21",
-    "tsdown": "^0.21.10",
+    "skybridge": "^0.36.2",
+    "tsdown": "^0.22.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "vitest": "^4.1.6",
+    "zod": "^4.4.3"
   },
   "scripts": {
     "build": "shx rm -rf dist && tsdown",
     "format": "biome check --write --error-on-warnings .",
-    "test": "pnpm run test:type && pnpm run test:format",
+    "test": "pnpm run test:unit && pnpm run test:type && pnpm run test:format",
+    "test:unit": "vitest run",
     "test:format": "biome check --error-on-warnings .",
     "test:type": "tsc --noEmit",
     "publish:npm": "pnpm publish --tag \"${NPM_TAG}\" --access public --no-git-checks"