@alpic-ai/api 0.0.0-dev.gd9b541c → 0.0.0-dev.gd9bd421

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/index.d.mts +5433 -145
  2. package/dist/index.mjs +788 -185
  3. package/package.json +9 -9
package/dist/index.mjs CHANGED
@@ -2,7 +2,7 @@ import { z } from "zod";
2
2
  import * as z$1 from "zod/v4";
3
3
  import { oc } from "@orpc/contract";
4
4
  import ms from "ms";
5
- //#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
5
+ //#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.32.0_supports-color@7.2.0_zod@4.5.4/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
6
6
  /**
7
7
  * Reusable URL validation that disallows javascript: scheme
8
8
  */
@@ -119,7 +119,12 @@ z$1.object({
119
119
  token_type: z$1.string(),
120
120
  expires_in: z$1.coerce.number().optional(),
121
121
  scope: z$1.string().optional(),
122
- refresh_token: z$1.string().optional()
122
+ refresh_token: z$1.string().optional(),
123
+ /**
124
+ * Not part of the wire format: the authorization server this value was obtained from, added by
125
+ * the client's `auth()` before it is stored and compared when it is read back.
126
+ */
127
+ issuer: z$1.string().optional().catch(void 0)
123
128
  }).strip();
124
129
  z$1.object({
125
130
  error: z$1.string(),
@@ -158,7 +163,12 @@ const OAuthClientInformationSchema = z$1.object({
158
163
  client_id: z$1.string(),
159
164
  client_secret: z$1.string().optional(),
160
165
  client_id_issued_at: z$1.number().optional(),
161
- client_secret_expires_at: z$1.number().optional()
166
+ client_secret_expires_at: z$1.number().optional(),
167
+ /**
168
+ * Not part of the wire format: the authorization server this value was obtained from, added by
169
+ * the client's `auth()` before it is stored and compared when it is read back.
170
+ */
171
+ issuer: z$1.string().optional().catch(void 0)
162
172
  }).strip();
163
173
  OAuthClientMetadataSchema.merge(OAuthClientInformationSchema);
164
174
  z$1.object({
@@ -179,6 +189,7 @@ const PLATFORM_LABELS = {
179
189
  };
180
190
  const WAF_PLATFORMS = [
181
191
  "akamai",
192
+ "cato",
182
193
  "cloudflare",
183
194
  "fastly"
184
195
  ];
@@ -256,6 +267,25 @@ z.object({
256
267
  clientSecret: z.string(),
257
268
  clientScopes: z.array(z.string())
258
269
  });
270
+ const creditEntryReasonSchema = z.enum([
271
+ "free_seed",
272
+ "paid_conversion_floor",
273
+ "top_up",
274
+ "usage",
275
+ "admin_adjustment"
276
+ ]);
277
+ z.enum(["playground"]);
278
+ z.number().int().min(500);
279
+ const creditActivityEntrySchema = z.object({
280
+ reason: creditEntryReasonSchema,
281
+ day: z.number(),
282
+ amountInNanoUSD: z.number(),
283
+ messageCount: z.number().nullable()
284
+ });
285
+ z.object({
286
+ balanceInNanoUSD: z.number(),
287
+ recentActivity: z.array(creditActivityEntrySchema)
288
+ });
259
289
  const deploymentStatusSchema$1 = z.enum([
260
290
  "ongoing",
261
291
  "deployed",
@@ -283,33 +313,18 @@ const deploymentSummarySchema = z.object({
283
313
  createdAt: z.coerce.date(),
284
314
  updatedAt: z.coerce.date()
285
315
  });
286
- /**
287
- * Public environment
288
- *
289
- * Answers anonymously and exposes no OAuth metadata.
290
- */
316
+ /** Public environment: answers anonymously and exposes no OAuth metadata. */
291
317
  const publicEnvironmentSchema = z.object({
292
318
  allowsAnonymous: z.literal(true),
293
319
  oAuthMetadata: z.strictObject({})
294
320
  });
295
- /**
296
- * Protected environment with an external resource metadata URL
297
- *
298
- * An external resource metadata URL is returned in the WWW-Authenticate header during the first 401 response.
299
- * Everything that follows is handled outside of the MCP server scope.
300
- */
321
+ /** Protected environment whose external resource metadata URL is returned in the WWW-Authenticate header on the first 401; everything after is handled outside the MCP server scope. */
301
322
  const externalResourceMetadataEnvironmentSchema = z.object({
302
323
  allowsAnonymous: z.boolean(),
303
324
  oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
304
325
  scope: z.string().optional()
305
326
  });
306
- /**
307
- * Protected environment with an external authorization server URL
308
- *
309
- * The server itself exposes the /.well-known/oauth-protected-resource endpoint.
310
- * An external authorization server URL is returned when requesting the endpoint.
311
- * Everything that follows is handled outside of the MCP server scope.
312
- */
327
+ /** Protected environment whose own /.well-known/oauth-protected-resource endpoint points at an external authorization server; everything after is handled outside the MCP server scope. */
313
328
  const externalAuthorizationServerEnvironmentSchema = z.object({
314
329
  allowsAnonymous: z.boolean(),
315
330
  oAuthMetadata: z.object({
@@ -318,12 +333,7 @@ const externalAuthorizationServerEnvironmentSchema = z.object({
318
333
  }),
319
334
  scope: z.string().optional()
320
335
  });
321
- /**
322
- * Standalone protected environment
323
- *
324
- * The server itself exposes the /.well-known/oauth-protected-resource endpoint.
325
- * The server itself exposes the /.well-known/oauth-authorization-server endpoint.
326
- */
336
+ /** Standalone protected environment: the server itself exposes both the /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server endpoints. */
327
337
  const standaloneEnvironmentSchema = z.object({
328
338
  allowsAnonymous: z.boolean(),
329
339
  oAuthMetadata: z.object({
@@ -332,13 +342,7 @@ const standaloneEnvironmentSchema = z.object({
332
342
  }),
333
343
  scope: z.string().optional()
334
344
  });
335
- /**
336
- * Protected environment without OAuth discovery
337
- *
338
- * The server enforces authentication but exposes no OAuth discovery metadata.
339
- * Neither /.well-known/oauth-protected-resource nor /.well-known/oauth-authorization-server
340
- * are advertised. Clients must obtain credentials out-of-band.
341
- */
345
+ /** Protected environment that enforces authentication but advertises no OAuth discovery metadata; clients must obtain credentials out-of-band. */
342
346
  const protectedWithoutDiscoveryEnvironmentSchema = z.object({
343
347
  allowsAnonymous: z.literal(false),
344
348
  oAuthMetadata: z.strictObject({}),
@@ -426,14 +430,16 @@ z.object({
426
430
  collectResponsePayload: z.boolean(),
427
431
  collectErrorMessage: z.boolean(),
428
432
  collectUserData: z.boolean(),
429
- identityTraitKey: z.string().min(1).max(200).nullable()
433
+ identityTraitKey: z.string().min(1).max(200).nullable(),
434
+ leadEventName: z.string().min(1).max(200).nullable()
430
435
  });
431
- z.object({
436
+ const feedbackSchema = z.object({
432
437
  id: z.string(),
433
438
  createdAt: z.coerce.date(),
434
439
  environmentId: z.string(),
435
440
  content: z.string(),
436
- source: z.enum(["model", "user"])
441
+ source: z.enum(["model", "user"]),
442
+ clientName: z.string().nullable()
437
443
  });
438
444
  z.object({
439
445
  content: z.string(),
@@ -449,7 +455,7 @@ const intentCategoryColorSchema = z.enum([
449
455
  "pink",
450
456
  "gray"
451
457
  ]);
452
- intentCategoryColorSchema.options;
458
+ const INTENT_CATEGORY_COLORS = intentCategoryColorSchema.options;
453
459
  const intentCategorySchema = z.object({
454
460
  id: z.string(),
455
461
  createdAt: z.coerce.date(),
@@ -457,7 +463,7 @@ const intentCategorySchema = z.object({
457
463
  name: z.string(),
458
464
  color: intentCategoryColorSchema
459
465
  });
460
- z.object({
466
+ const intentCategorySummarySchema = z.object({
461
467
  id: z.string(),
462
468
  name: z.string(),
463
469
  color: intentCategoryColorSchema,
@@ -469,6 +475,7 @@ z.object({
469
475
  environmentId: z.string(),
470
476
  toolName: z.string(),
471
477
  message: z.string(),
478
+ clientName: z.string().nullable(),
472
479
  categories: z.array(intentCategorySchema)
473
480
  });
474
481
  const signalCategorySchema = z.object({
@@ -527,12 +534,270 @@ z.object({
527
534
  createdAt: z.coerce.date(),
528
535
  updatedAt: z.coerce.date()
529
536
  });
537
+ const alpicMcpRequestLogSchema = z.object({
538
+ type: z.literal("mcp_request"),
539
+ method: z.string()
540
+ });
541
+ const alpicMcpErrorLogSchema = z.object({
542
+ type: z.literal("mcp_error"),
543
+ method: z.string(),
544
+ error: z.string()
545
+ });
546
+ z.union([alpicMcpRequestLogSchema, alpicMcpErrorLogSchema]);
530
547
  z.enum([
531
548
  "INFO",
532
549
  "WARNING",
533
550
  "DEBUG",
534
551
  "ERROR"
535
552
  ]);
553
+ const LOG_SEARCH_MAX_ESCAPED_LENGTH = 960;
554
+ function escapeLogSearchTerm(search) {
555
+ return [...search].flatMap((character) => [...new TextEncoder().encode(character)]).map((byte) => {
556
+ const character = String.fromCharCode(byte);
557
+ return /^[a-zA-Z0-9]$/.test(character) ? character : `\\x${byte.toString(16).toUpperCase().padStart(2, "0")}`;
558
+ }).join("");
559
+ }
560
+ const logSearchSchema = z.string().max(240, `Search must be 240 characters or fewer`).refine((search) => escapeLogSearchTerm(search).length <= LOG_SEARCH_MAX_ESCAPED_LENGTH, "Search is too complex; shorten it or use fewer special characters");
561
+ /** Only names a vendor actually ships belong here: lookalikes like `claude-code-test` are customers' own scripts. */
562
+ const MCP_CLIENT_GROUPS = [
563
+ {
564
+ id: "claude_code",
565
+ label: "Claude Code",
566
+ vendor: "anthropic",
567
+ rawNames: ["claude-code", "Anthropic/ClaudeCodeDesktop"]
568
+ },
569
+ {
570
+ id: "claude",
571
+ label: "Claude",
572
+ vendor: "anthropic",
573
+ rawNames: [
574
+ "Anthropic/ClaudeAI",
575
+ "claude-ai",
576
+ "claude",
577
+ "Claude",
578
+ "claude-desktop",
579
+ "claude-desktop-3p"
580
+ ]
581
+ },
582
+ {
583
+ id: "claude_mobile",
584
+ label: "Claude mobile",
585
+ vendor: "anthropic",
586
+ rawNames: ["claude-ios", "ClaudeAndroid"]
587
+ },
588
+ {
589
+ id: "claude_cowork",
590
+ label: "Claude Cowork",
591
+ vendor: "anthropic",
592
+ rawNames: ["Anthropic/Cowork"]
593
+ },
594
+ {
595
+ id: "claude_toolbox",
596
+ label: "Claude Toolbox",
597
+ vendor: "anthropic",
598
+ rawNames: ["Anthropic/Toolbox", "Anthropic/toolbox-bootstrap"]
599
+ },
600
+ {
601
+ id: "anthropic_api",
602
+ label: "Anthropic API",
603
+ vendor: "anthropic",
604
+ rawNames: ["Anthropic/API"]
605
+ },
606
+ {
607
+ id: "anthropic_connector_refresh",
608
+ label: "Anthropic (connector refresh)",
609
+ vendor: "anthropic",
610
+ rawNames: ["Anthropic"]
611
+ },
612
+ {
613
+ id: "codex",
614
+ label: "Codex",
615
+ vendor: "openai",
616
+ rawNames: [
617
+ "codex-mcp-client",
618
+ "codex",
619
+ "Codex",
620
+ "codex-cli",
621
+ "openai-mcp (Codex)"
622
+ ]
623
+ },
624
+ {
625
+ id: "chatgpt",
626
+ label: "ChatGPT",
627
+ vendor: "openai",
628
+ rawNames: ["openai-mcp (ChatGPT)"]
629
+ },
630
+ {
631
+ id: "openai_responses_api",
632
+ label: "OpenAI Responses API",
633
+ vendor: "openai",
634
+ rawNames: ["openai-mcp (Responses API)"]
635
+ },
636
+ {
637
+ id: "openai_agent_builder",
638
+ label: "OpenAI Agent Builder",
639
+ vendor: "openai",
640
+ rawNames: ["openai-mcp (Agent Builder)"]
641
+ },
642
+ {
643
+ id: "openai_other",
644
+ label: "OpenAI Other",
645
+ vendor: "openai",
646
+ rawNames: ["openai-mcp"]
647
+ },
648
+ {
649
+ id: "cursor",
650
+ label: "Cursor",
651
+ vendor: "cursor",
652
+ rawNames: [
653
+ "cursor-vscode",
654
+ "Cursor",
655
+ "cursor"
656
+ ]
657
+ },
658
+ {
659
+ id: "cline",
660
+ label: "Cline",
661
+ vendor: "cline",
662
+ rawNames: [
663
+ "Cline",
664
+ "cline",
665
+ "@cline/core"
666
+ ]
667
+ },
668
+ {
669
+ id: "github_copilot",
670
+ label: "GitHub Copilot",
671
+ vendor: "githubCopilot",
672
+ rawNames: [
673
+ "Copilot",
674
+ "github-copilot-developer",
675
+ "Copilot MCP Gateway",
676
+ "Xcode/copilot-xcode"
677
+ ]
678
+ },
679
+ {
680
+ id: "gemini_cli",
681
+ label: "Gemini CLI",
682
+ vendor: "google",
683
+ rawNames: ["gemini-cli-mcp-client", "gemini-cli"]
684
+ },
685
+ {
686
+ id: "antigravity",
687
+ label: "Antigravity",
688
+ vendor: "google",
689
+ rawNames: ["antigravity-client"]
690
+ },
691
+ {
692
+ id: "gemini",
693
+ label: "Gemini",
694
+ vendor: "google",
695
+ rawNames: ["Gemini", "google-ai-edge-gallery"]
696
+ },
697
+ {
698
+ id: "windsurf",
699
+ label: "Windsurf",
700
+ vendor: "windsurf",
701
+ rawNames: ["Windsurf", "windsurf-client"]
702
+ },
703
+ {
704
+ id: "mistral",
705
+ label: "Mistral / Le Chat",
706
+ vendor: "mistral",
707
+ rawNames: ["Mistral"],
708
+ rawNamePrefixes: ["connector:custom-mcp:"]
709
+ },
710
+ {
711
+ id: "n8n",
712
+ label: "n8n",
713
+ vendor: "n8n",
714
+ rawNames: [
715
+ "@n8n/n8n-nodes-langchain.mcpClient",
716
+ "@n8n/n8n-nodes-langchain.mcpClientTool",
717
+ "n8n"
718
+ ]
719
+ },
720
+ {
721
+ id: "alpic_playground",
722
+ label: "Alpic Playground",
723
+ vendor: "alpic",
724
+ rawNames: ["alpic-playground", "playground"]
725
+ },
726
+ {
727
+ id: "opencode",
728
+ label: "opencode",
729
+ vendor: "opencode",
730
+ rawNames: ["opencode"]
731
+ },
732
+ {
733
+ id: "zed",
734
+ label: "Zed",
735
+ vendor: "zed",
736
+ rawNames: ["Zed", "zed"]
737
+ },
738
+ {
739
+ id: "zapier",
740
+ label: "Zapier",
741
+ vendor: "zapier",
742
+ rawNames: ["Zapier", "zapier"]
743
+ },
744
+ {
745
+ id: "make",
746
+ label: "Make",
747
+ vendor: "make",
748
+ rawNames: ["Make", "make"]
749
+ },
750
+ {
751
+ id: "librechat",
752
+ label: "LibreChat",
753
+ vendor: "mcp",
754
+ rawNames: ["LibreChat", "librechat"]
755
+ },
756
+ {
757
+ id: "jan",
758
+ label: "Jan",
759
+ vendor: "mcp",
760
+ rawNames: ["Jan", "jan"]
761
+ },
762
+ {
763
+ id: "goose",
764
+ label: "goose",
765
+ vendor: "mcp",
766
+ rawNames: ["goose", "Goose"]
767
+ },
768
+ {
769
+ id: "mcphost",
770
+ label: "mcphost",
771
+ vendor: "mcp",
772
+ rawNames: ["mcphost"]
773
+ },
774
+ {
775
+ id: "mcporter",
776
+ label: "mcporter",
777
+ vendor: "mcp",
778
+ rawNames: ["mcporter"]
779
+ },
780
+ {
781
+ id: "rmcp",
782
+ label: "rmcp",
783
+ vendor: "mcp",
784
+ rawNames: ["rmcp"]
785
+ },
786
+ {
787
+ id: "unnamed_client",
788
+ label: "Unnamed client",
789
+ vendor: "mcp",
790
+ rawNames: [
791
+ "mcp",
792
+ "unknown",
793
+ ""
794
+ ]
795
+ }
796
+ ];
797
+ /** A source pattern, not a RegExp, because analytics renders the same rule into ClickHouse RE2, which shares this syntax. */
798
+ const MCP_REMOTE_WRAPPER_SUFFIX = String.raw` \(via mcp-remote [^\n]+?\)$`;
799
+ new RegExp(MCP_REMOTE_WRAPPER_SUFFIX);
800
+ new Map(MCP_CLIENT_GROUPS.map((group) => [group.id, group]));
536
801
  const runtimeSchema = z.enum([
537
802
  "python3.13",
538
803
  "python3.14",
@@ -610,15 +875,7 @@ z.object({
610
875
  serverFields: serverFieldsSchema$1,
611
876
  source: z.enum(["registry", "defaults"])
612
877
  });
613
- /**
614
- * Returns a variant of a `maxLength`-constrained string that clamps (truncates) instead of
615
- * rejecting on overflow — used for AI-generated copy where the model routinely overshoots.
616
- *
617
- * NOTE: this rebuilds the schema from scratch, carrying over only `maxLength` (as a clamp),
618
- * `minLength`, and the description. Any other validators on the source field (`.regex()`,
619
- * `.email()`, custom refinements) are intentionally dropped — this helper is meant for plain
620
- * free-text length caps only. A field with `null` `maxLength` is returned unchanged.
621
- */
878
+ /** Clamps instead of rejecting on max-length overflow (for AI-generated copy that overshoots); intentionally carries over only maxLength, minLength, and description, dropping any other validators. */
622
879
  const clampStringField = (field) => {
623
880
  const max = field.maxLength;
624
881
  if (max === null) return field;
@@ -626,6 +883,10 @@ const clampStringField = (field) => {
626
883
  const withMin = field.minLength === null ? clamped : clamped.min(field.minLength);
627
884
  return field.description ? withMin.describe(field.description) : withMin;
628
885
  };
886
+ const unboundedArrayField = (field) => {
887
+ const unbounded = z.array(field.element);
888
+ return field.description ? unbounded.describe(field.description) : unbounded;
889
+ };
629
890
  const toolDefinitionSchema = z.object({
630
891
  name: z.string(),
631
892
  title: z.string().optional().describe("Human-friendly name for the tool, used in the UI. If not provided, `name` will be used."),
@@ -638,11 +899,22 @@ const toolDefinitionSchema = z.object({
638
899
  }).optional()
639
900
  });
640
901
  const positiveTestCaseSchema = z.object({
641
- scenario: z.string().describe("Short label for what this case demonstrates."),
642
- userPrompt: z.string().describe("A realistic, standalone user message a reviewer can paste and run with no prior state or multi-turn setup. Vary phrasing and tone across cases."),
902
+ scenario: z.string().min(1).describe("Short label for what this case demonstrates."),
903
+ userPrompt: z.string().min(1).describe("A realistic, standalone user message a reviewer can paste and run with no prior state or multi-turn setup. Vary phrasing and tone across cases."),
643
904
  toolTriggered: z.string().optional().describe("The tool this prompt should invoke."),
644
905
  expectedOutput: z.string().optional().describe("What the user should see, including post-interaction behaviour where relevant.")
645
- }).partial().describe("Each case: Scenario, User prompt, Tool triggered, Expected output.");
906
+ }).describe("Each case: Scenario, User prompt, Tool triggered, Expected output.");
907
+ const positiveTestCaseDraftSchema = positiveTestCaseSchema.partial().extend({
908
+ scenario: z.string().optional(),
909
+ userPrompt: z.string().optional()
910
+ });
911
+ const blankPositiveTestCase = () => ({
912
+ scenario: "",
913
+ userPrompt: "",
914
+ toolTriggered: "",
915
+ expectedOutput: ""
916
+ });
917
+ const toFixedLength = (entries, length, blank) => Array.from({ length }, (_, index) => entries[index] ?? blank());
646
918
  const screenshotEntrySchema = z.object({
647
919
  prompt: z.string(),
648
920
  url: z.url()
@@ -955,20 +1227,25 @@ const chatgptTranslationLocaleSchema = z.enum([
955
1227
  "zh-TW"
956
1228
  ]);
957
1229
  const negativeTestCaseSchema = z.object({
958
- scenario: z.string(),
959
- userPrompt: z.string()
960
- }).partial().describe("Each case: Scenario + User prompt (the app should NOT trigger).");
1230
+ scenario: z.string().min(1),
1231
+ userPrompt: z.string().min(1)
1232
+ }).describe("Each case: Scenario + User prompt (the plugin should NOT trigger).");
1233
+ const negativeTestCaseDraftSchema = negativeTestCaseSchema.partial().extend({
1234
+ scenario: z.string().optional(),
1235
+ userPrompt: z.string().optional()
1236
+ });
1237
+ const blankNegativeTestCase = () => ({
1238
+ scenario: "",
1239
+ userPrompt: ""
1240
+ });
1241
+ const chatgptSkillSchema = z.object({ name: z.string() }).describe("A skill discovered on the MCP server, by name.");
961
1242
  const chatgptToolJustificationSchema = z.object({
962
1243
  toolName: z.string(),
963
1244
  readOnlyJustification: z.string().describe("One sentence on what the tool reads and returns."),
964
1245
  openWorldJustification: z.string().describe("One sentence on whether the tool reaches external systems beyond your own service."),
965
1246
  destructiveJustification: z.string().describe("One sentence on whether the tool changes data. For a read-only tool, state the full triad: \"No data is created, modified, or deleted.\"")
966
1247
  }).describe("Per-tool justification of each MCP annotation value (one specific sentence per hint).");
967
- /**
968
- * Base copy fields, defined once and reused by both the submission form and per-locale
969
- * translations so the constraints (tagline ≤ 30 chars) never drift. The translation generation
970
- * path wraps these in {@link clampStringField} since the LLM tends to overshoot the limit.
971
- */
1248
+ /** Defined once and reused by both the submission form and per-locale translations so the tagline ≤ 30 chars constraint never drifts. */
972
1249
  const chatgptTaglineSchema = z.string().max(30);
973
1250
  const chatgptDescriptionSchema = z.string();
974
1251
  const chatgptTranslationSchema = z.object({
@@ -977,34 +1254,32 @@ const chatgptTranslationSchema = z.object({
977
1254
  description: chatgptDescriptionSchema
978
1255
  }).describe("Locale-scoped override for tagline + description. English (US) is the default.");
979
1256
  chatgptTranslationSchema.extend({ tagline: clampStringField(chatgptTaglineSchema) });
980
- /**
981
- * Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section.
982
- * When adding/removing/reordering fields, keep this in sync with the sheet.
983
- */
1257
+ /** Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section; keep it in sync with the sheet. */
984
1258
  const chatgptSubmissionFormDataSchema = z.object({
985
1259
  logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
986
1260
  logoDark: z.string().optional().describe("Optional dark-mode logo icon. Square PNG, same specs as the light icon. Leave empty if the light icon also works on dark backgrounds."),
987
- appName: z.string().describe("The name users will see in ChatGPT and in the Apps Directory."),
1261
+ appName: z.string().describe("The name users will see in ChatGPT and in the Plugin Directory."),
988
1262
  tagline: chatgptTaglineSchema.describe("Plain-language phrase focused on function and user value, 30 chars max. Avoid generic superlatives like \"the best …\"."),
989
- description: chatgptDescriptionSchema.describe("Clear, engaging description highlighting what the app does and why people will love it. Appears publicly on the directory page. End it by naming the product categories or intents the app does NOT cover, so ChatGPT learns when not to route to it (define exclusions by absent categories or wrong intents, never by naming other brands)."),
1263
+ description: chatgptDescriptionSchema.describe("Clear, engaging description highlighting what the plugin does and why people will love it. Appears publicly on the directory page. End it by naming the product categories or intents the plugin does NOT cover, so ChatGPT learns when not to route to it (define exclusions by absent categories or wrong intents, never by naming other brands)."),
990
1264
  category: chatgptCategorySchema.describe("Category from the OpenAI taxonomy."),
991
- developerName: z.string().describe("Developer name shown publicly on the app's directory page."),
1265
+ developerName: z.string().describe("Developer name shown publicly on the plugin's directory page."),
992
1266
  companyUrl: urlField.describe("Your company's main website URL."),
993
1267
  supportChannel: supportChannelSchema.describe("Customer support URL or email address."),
994
1268
  privacyPolicyUrl: urlField.describe("URL to your privacy policy."),
995
- termsOfServiceUrl: urlField.describe("URL to the app's terms of service."),
996
- demoRecordingUrl: urlField.describe("URL to a video demonstrating the app, recorded via OpenAI Developer Mode. Cover all main use cases on web, iOS, and Android."),
997
- appCommerceAndPurchasing: z.boolean().describe("Checkbox: 'My app links or directs users out of ChatGPT to make purchases.' Defaults to false. Verify the app does not offer digital goods."),
1269
+ termsOfServiceUrl: urlField.describe("URL to the plugin's terms of service."),
1270
+ demoRecordingUrl: urlField.describe("URL to a video demonstrating the plugin, recorded via OpenAI Developer Mode. Cover all main use cases on web, iOS, and Android."),
1271
+ appCommerceAndPurchasing: z.boolean().describe("Checkbox: 'My plugin links or directs users out of ChatGPT to make purchases.' Defaults to false. Verify the plugin does not offer digital goods."),
998
1272
  serverUrl: urlField.describe("URL of the MCP server."),
999
1273
  authentication: chatgptAuthenticationSchema.describe("OAuth 2.0 or No auth. OAuth configuration is auto-discovered from the MCP server's metadata."),
1000
1274
  tools: z.array(toolDefinitionSchema).describe("List of tools exposed by the MCP server (auto-populated from the production server's manifest)."),
1001
1275
  toolJustifications: z.array(chatgptToolJustificationSchema).describe("Per-tool justification of `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotation values. One short, specific sentence per hint describing what the tool actually does."),
1002
- testCases: z.array(positiveTestCaseSchema).describe("At least 5 positive test cases. Each: Scenario, User prompt, Tool triggered, Expected output. Collectively cover the full capability across different flow stages (initial search or browse, market or locale handling, post-interaction detail, an action ChatGPT performs on the user's behalf, and a conversion or secondary tool) rather than five variations of the same first step."),
1003
- negativeTestCases: z.array(negativeTestCaseSchema).describe("3 negative test cases: prompts where the app should NOT trigger but the model might think it is relevant. These become production routing metadata that teaches ChatGPT when to stay silent, so pick tight near-misses: a product category the app does not carry, the right brand or domain but an intent the app does not serve, or a boundary with a sibling app."),
1004
- screenshots: z.array(screenshotEntrySchema.extend({ prompt: z.string().max(75, { error: "Screenshot prompts are limited to 75 characters." }) })).max(3).describe("In-app screenshots paired with the user prompt that produced them (each prompt is 75 characters max). Widget apps must show the widget UI; non-widget apps show the model response. Min 1, max 3 entries, all public. Images: 706px wide, 400–860px tall, PNG."),
1276
+ skills: z.array(chatgptSkillSchema).optional().describe("Skills the server exposes over MCP (auto-populated from the production server's manifest). Left unset when the server does not advertise the skills extension, which is a different state from advertising it and exposing none."),
1277
+ testCases: z.array(positiveTestCaseSchema).length(5).describe("Exactly 5 positive test cases. Each: Scenario, User prompt, Tool triggered, Expected output. Collectively cover the full capability across different flow stages (initial search or browse, market or locale handling, post-interaction detail, an action ChatGPT performs on the user's behalf, and a conversion or secondary tool) rather than five variations of the same first step."),
1278
+ negativeTestCases: z.array(negativeTestCaseSchema).length(3).describe("Exactly 3 negative test cases: prompts where the plugin should NOT trigger but the model might think it is relevant. These become production routing metadata that teaches ChatGPT when to stay silent, so pick tight near-misses: a product category the plugin does not carry, the right brand or domain but an intent the plugin does not serve, or a boundary with a sibling plugin."),
1279
+ screenshots: z.array(screenshotEntrySchema.extend({ prompt: z.string().max(75, { error: "Screenshot prompts are limited to 75 characters." }) })).max(3).describe("In-plugin screenshots paired with the user prompt that produced them (each prompt is 75 characters max). Widget plugins must show the widget UI; non-widget plugins show the model response. Min 1, max 3 entries, all public. Images: 706px wide, 400–860px tall, PNG."),
1005
1280
  translations: z.array(chatgptTranslationSchema).describe("Per-locale translation of tagline + description. English (US) is the default."),
1006
1281
  allowedCountries: chatgptAllowedCountriesSchema.describe("Availability: all supported countries, or an allow-list / block-list of specific ones (ISO alpha-2)."),
1007
- releaseNotes: z.string().describe("Publicly displayed on the app details page.")
1282
+ releaseNotes: z.string().describe("Publicly displayed on the plugin details page.")
1008
1283
  });
1009
1284
  const chatgptSubmissionDraftSchema = chatgptSubmissionFormDataSchema.partial().extend({
1010
1285
  tagline: z.string().optional(),
@@ -1015,23 +1290,35 @@ const chatgptSubmissionDraftSchema = chatgptSubmissionFormDataSchema.partial().e
1015
1290
  demoRecordingUrl: z.string().optional(),
1016
1291
  serverUrl: z.string().optional(),
1017
1292
  screenshots: z.array(screenshotDraftEntrySchema).optional(),
1293
+ testCases: z.array(positiveTestCaseDraftSchema).optional(),
1294
+ negativeTestCases: z.array(negativeTestCaseDraftSchema).optional(),
1018
1295
  translations: z.array(chatgptTranslationSchema.extend({ tagline: z.string() })).optional()
1019
1296
  });
1020
- chatgptSubmissionFormDataSchema.pick({
1297
+ /** Source of truth for the fields `SubmissionPrefillService.prefill({ platform: "chatgpt" })` can populate. */
1298
+ const chatgptPrefillFormDataSchema = chatgptSubmissionFormDataSchema.pick({
1021
1299
  appName: true,
1022
1300
  developerName: true,
1023
1301
  serverUrl: true,
1024
1302
  tools: true,
1303
+ skills: true,
1025
1304
  authentication: true
1026
1305
  });
1027
- chatgptSubmissionFormDataSchema.pick({
1306
+ /** Source of truth for `SubmissionPrefillService.generate({ platform: "chatgpt" })`. */
1307
+ const chatgptAiGeneratedFormDataSchema = chatgptSubmissionFormDataSchema.pick({
1028
1308
  tagline: true,
1029
1309
  description: true,
1030
1310
  category: true,
1031
1311
  testCases: true,
1032
1312
  negativeTestCases: true,
1033
1313
  toolJustifications: true
1034
- }).extend({ tagline: clampStringField(chatgptSubmissionFormDataSchema.shape.tagline) });
1314
+ }).extend({
1315
+ testCases: unboundedArrayField(chatgptSubmissionFormDataSchema.shape.testCases),
1316
+ negativeTestCases: unboundedArrayField(chatgptSubmissionFormDataSchema.shape.negativeTestCases)
1317
+ }).extend({
1318
+ tagline: clampStringField(chatgptSubmissionFormDataSchema.shape.tagline),
1319
+ testCases: z.array(positiveTestCaseDraftSchema).transform((cases) => toFixedLength(cases, 5, blankPositiveTestCase)),
1320
+ negativeTestCases: z.array(negativeTestCaseDraftSchema).transform((cases) => toFixedLength(cases, 3, blankNegativeTestCase))
1321
+ });
1035
1322
  const claudeCategorySchema = z.enum([
1036
1323
  "Productivity",
1037
1324
  "Communication",
@@ -1077,11 +1364,7 @@ const claudePolicyAcknowledgementSchema = z.enum([
1077
1364
  "My connector does not collect conversation data beyond what is needed for its function.",
1078
1365
  "Public documentation for this connector will be live by the publish date."
1079
1366
  ]);
1080
- /**
1081
- * Field order mirrors the claude.ai directory submission wizard
1082
- * (`claude.ai/admin-settings/directory/submissions/new`), grouped by step.
1083
- * When adding/removing/reordering fields, keep this in sync with the wizard.
1084
- */
1367
+ /** Field order mirrors the claude.ai directory submission wizard (`claude.ai/admin-settings/directory/submissions/new`), grouped by step; keep it in sync with the wizard. */
1085
1368
  const claudeSubmissionFormDataSchema = z.object({
1086
1369
  serverUrl: z.url().describe(`The full https:// URL where your MCP server is hosted and reachable. In the claude.ai wizard this is read live
1087
1370
  from the custom connector you select — the connection is used to verify the URL and the tool list at submission time.
@@ -1158,7 +1441,8 @@ const claudeSubmissionDraftSchema = claudeSubmissionFormDataSchema.partial().ext
1158
1441
  categories: z.array(claudeCategorySchema).optional(),
1159
1442
  screenshots: z.array(screenshotDraftEntrySchema).optional()
1160
1443
  });
1161
- claudeSubmissionFormDataSchema.pick({
1444
+ /** Source of truth for the fields `SubmissionPrefillService.prefill({ platform: "claudeai" })` can populate. */
1445
+ const claudePrefillFormDataSchema = claudeSubmissionFormDataSchema.pick({
1162
1446
  serverUrl: true,
1163
1447
  name: true,
1164
1448
  slug: true,
@@ -1173,39 +1457,93 @@ claudeSubmissionFormDataSchema.pick({
1173
1457
  connectionRequirements: claudeSubmissionFormDataSchema.shape.connectionRequirements.optional(),
1174
1458
  testInstructions: claudeSubmissionFormDataSchema.shape.testInstructions.optional()
1175
1459
  });
1176
- /**
1177
- * Narrative fields the LLM-backed generation step produces for Claude submissions.
1178
- * This schema accepts the slightly loose shape returned by AI generation, then normalizes it into
1179
- * the strict form shape. Keep transforms here rather than in callers so generation leniency is
1180
- * colocated with the Claude contract.
1181
- */
1460
+ /** Loose shape returned by AI generation for Claude narrative fields; transforms live here so generation leniency stays colocated with the Claude contract. */
1182
1461
  const claudeAiGeneratedFormDataRawSchema = z.object({
1183
1462
  oneLiner: claudeSubmissionFormDataSchema.shape.oneLiner,
1184
1463
  description: claudeSubmissionFormDataSchema.shape.description,
1185
1464
  categories: z.array(claudeCategorySchema).describe(claudeCategoryDescription),
1186
1465
  primaryUseCases: claudeSubmissionFormDataSchema.shape.primaryUseCases
1187
1466
  });
1188
- claudeAiGeneratedFormDataRawSchema.extend({
1467
+ const claudeAiGeneratedFormDataSchema = claudeAiGeneratedFormDataRawSchema.extend({
1189
1468
  oneLiner: clampStringField(claudeSubmissionFormDataSchema.shape.oneLiner),
1190
1469
  categories: claudeAiGeneratedFormDataRawSchema.shape.categories.transform((categories) => categories.slice(0, 5))
1191
1470
  });
1471
+ function provenanceByField(prefillShape, aiGeneratedShape) {
1472
+ const byField = {};
1473
+ for (const field of Object.keys(prefillShape)) byField[field] = "prefilled";
1474
+ for (const field of Object.keys(aiGeneratedShape)) byField[field] = "ai-generated";
1475
+ return byField;
1476
+ }
1477
+ provenanceByField(claudePrefillFormDataSchema.shape, claudeAiGeneratedFormDataSchema.shape), provenanceByField(chatgptPrefillFormDataSchema.shape, chatgptAiGeneratedFormDataSchema.shape);
1478
+ const urlVerificationOutcomeSchema = z.enum([
1479
+ "pass",
1480
+ "fail",
1481
+ "unverified"
1482
+ ]);
1483
+ const VERIFIABLE_URL_FIELDS = {
1484
+ chatgpt: ["privacyPolicyUrl", "termsOfServiceUrl"],
1485
+ claudeai: ["privacyPolicy"]
1486
+ };
1487
+ const verifiableUrlFieldSchema = z.enum([...VERIFIABLE_URL_FIELDS.chatgpt, ...VERIFIABLE_URL_FIELDS.claudeai]);
1488
+ const policyDisclosureSchema = z.enum([
1489
+ "dataCategories",
1490
+ "purposesOfUse",
1491
+ "recipients",
1492
+ "retention"
1493
+ ]);
1494
+ const urlVerificationFieldResultSchema = z.object({
1495
+ field: verifiableUrlFieldSchema,
1496
+ url: z.string(),
1497
+ outcome: urlVerificationOutcomeSchema,
1498
+ reason: z.string(),
1499
+ concerns: z.array(z.string()).optional(),
1500
+ scrapedWith: z.enum(["fetch", "firecrawl"]).optional()
1501
+ });
1502
+ const urlVerificationSchema = z.object({
1503
+ verifiedAt: z.coerce.date(),
1504
+ results: z.array(urlVerificationFieldResultSchema)
1505
+ });
1506
+ const pageKindSchema = z.enum([
1507
+ "expectedDocument",
1508
+ "errorPage",
1509
+ "loginWall",
1510
+ "parkedDomain",
1511
+ "comingSoon",
1512
+ "marketingPage",
1513
+ "unrelatedDocument"
1514
+ ]);
1515
+ z.object({
1516
+ pageKind: pageKindSchema.describe("What the page actually is. Use 'expectedDocument' only when it is genuinely the document the field claims."),
1517
+ reason: z.string().max(200).describe("One sentence naming what the page is, addressed to the developer who entered the URL."),
1518
+ missingDisclosures: z.array(policyDisclosureSchema).describe("For a privacy policy only: which of the four required disclosures the text does not cover. Empty for every other page kind.")
1519
+ });
1192
1520
  const submissionMetaFieldsSchema = z.object({
1193
1521
  id: z.string(),
1194
1522
  environmentId: z.string(),
1195
1523
  auditId: z.string().nullable(),
1524
+ urlVerification: urlVerificationSchema.nullable().default(null),
1196
1525
  createdAt: z.coerce.date(),
1197
1526
  updatedAt: z.coerce.date()
1198
1527
  });
1199
1528
  const claudeSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
1200
1529
  platform: z.literal("claudeai"),
1201
- formData: claudeSubmissionDraftSchema
1530
+ formData: claudeSubmissionDraftSchema,
1531
+ prefillSnapshot: claudeSubmissionDraftSchema.nullable().default(null)
1202
1532
  });
1203
1533
  const chatgptSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
1204
1534
  platform: z.literal("chatgpt"),
1205
- formData: chatgptSubmissionDraftSchema
1535
+ formData: chatgptSubmissionDraftSchema,
1536
+ prefillSnapshot: chatgptSubmissionDraftSchema.nullable().default(null)
1206
1537
  });
1207
- z.discriminatedUnion("platform", [claudeSubmissionSchemaInternal, chatgptSubmissionSchemaInternal]);
1538
+ const submissionSchemaInternal = z.discriminatedUnion("platform", [claudeSubmissionSchemaInternal, chatgptSubmissionSchemaInternal]);
1208
1539
  z.union([claudeSubmissionDraftSchema, chatgptSubmissionDraftSchema]);
1540
+ /** Discriminated on `platform`, which pins the shape of `formData`: a Claude submission cannot carry chatgpt-only fields, and vice-versa. */
1541
+ const submissionSchema = submissionSchemaInternal;
1542
+ z.literal([
1543
+ 100,
1544
+ 75,
1545
+ 50
1546
+ ]);
1209
1547
  const subscriptionPlanSchema = z.enum([
1210
1548
  "pro",
1211
1549
  "business",
@@ -1217,17 +1555,72 @@ const customerCreditsSchema = z.object({
1217
1555
  expiresAt: z.number().nullable(),
1218
1556
  currency: z.string()
1219
1557
  });
1220
- const customerUsageSchema = z.object({
1221
- amountInCents: z.number(),
1222
- currency: z.string(),
1223
- periodEnd: z.number()
1224
- });
1225
1558
  const partnerDiscountSchema = z.object({ endsAt: z.number() });
1226
1559
  z.object({
1227
1560
  customerCredits: customerCreditsSchema.nullable(),
1228
- customerUsage: customerUsageSchema.nullable(),
1229
1561
  partnerDiscount: partnerDiscountSchema.nullable()
1230
1562
  });
1563
+ const metricsQueueEventSchema = z.object({
1564
+ ts: z.number().int(),
1565
+ method: z.string(),
1566
+ tool: z.string().nullable(),
1567
+ client: z.string(),
1568
+ sessionId: z.string().nullable(),
1569
+ conversationId: z.string().nullable().optional(),
1570
+ durationMs: z.number().int(),
1571
+ outputTokens: z.number().int().nullable(),
1572
+ errorType: z.enum([
1573
+ "mcp_error",
1574
+ "tool_error",
1575
+ "timeout"
1576
+ ]).nullable(),
1577
+ errorCode: z.number().int().nullable()
1578
+ });
1579
+ z.object({
1580
+ v: z.literal(1),
1581
+ envId: z.string(),
1582
+ events: z.array(metricsQueueEventSchema)
1583
+ });
1584
+ z.object({ v: z.number() });
1585
+ const telemetrySignalSchema = z.enum([
1586
+ "logs",
1587
+ "metrics",
1588
+ "traces"
1589
+ ]);
1590
+ const otlpProtocolSchema = z.enum(["http/protobuf", "http/json"]);
1591
+ const otlpEndpointSchema = z.string().trim().min(1).max(2048);
1592
+ const OTLP_HEADER_VALUE_MAX_LENGTH = 2048;
1593
+ const otlpHeaderNameSchema = z.string().trim().min(1, "Enter a header name").max(128).regex(/^[A-Za-z0-9!#$%&'*+\-.^_`|~]+$/, "Use letters, digits and !#$%&'*+-.^_`|~ only");
1594
+ const otlpHeaderValueSchema = z.string().trim().max(OTLP_HEADER_VALUE_MAX_LENGTH).refine((value) => !/[\r\n]/.test(value), "Line breaks are not allowed in a header value");
1595
+ const telemetryDestinationHeaderSchema = z.object({
1596
+ id: z.string(),
1597
+ name: otlpHeaderNameSchema,
1598
+ value: otlpHeaderValueSchema,
1599
+ isSecret: z.boolean()
1600
+ });
1601
+ const otlpPushFailureReasonSchema = z.enum([
1602
+ "credentials",
1603
+ "wrong-path",
1604
+ "wrong-protocol",
1605
+ "invalid-payload",
1606
+ "partial-rejection",
1607
+ "blocked-target",
1608
+ "timeout",
1609
+ "unreachable",
1610
+ "receiver-error",
1611
+ "unexpected-status"
1612
+ ]);
1613
+ const telemetryDestinationStatusSchema = z.enum(["active", "suspended"]);
1614
+ z.object({
1615
+ id: z.string(),
1616
+ signal: telemetrySignalSchema,
1617
+ endpoint: otlpEndpointSchema,
1618
+ protocol: otlpProtocolSchema,
1619
+ headers: z.array(telemetryDestinationHeaderSchema),
1620
+ status: telemetryDestinationStatusSchema,
1621
+ lastFailureReason: otlpPushFailureReasonSchema.nullable(),
1622
+ isScopedToIntentionalRequestsOnly: z.boolean()
1623
+ });
1231
1624
  //#endregion
1232
1625
  //#region src/auth-scope.ts
1233
1626
  /** Accepts an API key or OAuth access token (default for most routes). */
@@ -1326,6 +1719,14 @@ const serverFieldsSchema = z.object({
1326
1719
  });
1327
1720
  //#endregion
1328
1721
  //#region src/api.contract.ts
1722
+ const isValidIanaTimeZone = (timeZone) => {
1723
+ try {
1724
+ new Intl.DateTimeFormat("en-US", { timeZone });
1725
+ return true;
1726
+ } catch {
1727
+ return false;
1728
+ }
1729
+ };
1329
1730
  const deploymentStatusSchema = z.enum([
1330
1731
  "ongoing",
1331
1732
  "deployed",
@@ -1354,21 +1755,20 @@ const deploymentSchema = z.object({
1354
1755
  isCurrent: z.boolean(),
1355
1756
  deploymentPageUrl: z.url().nullable()
1356
1757
  });
1357
- const isValidLogTimeInput = (value) => {
1758
+ const isValidTimeInput = (value) => {
1358
1759
  if (ms(value) !== void 0) return true;
1359
1760
  return !Number.isNaN(new Date(value).getTime());
1360
1761
  };
1361
- const createEnvironmentContractV1 = oc.route({
1762
+ const timeInputSchema = z.string().refine(isValidTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." });
1763
+ const base = oc.errors({ BAD_REQUEST: {} });
1764
+ const createEnvironmentContractV1 = base.route({
1362
1765
  path: "/v1/environments",
1363
1766
  method: "POST",
1364
1767
  summary: "Create an environment",
1365
1768
  description: "Create an environment for a project",
1366
1769
  tags: ["environments"],
1367
1770
  successDescription: "The environment has been created successfully"
1368
- }).errors({
1369
- NOT_FOUND: {},
1370
- BAD_REQUEST: {}
1371
- }).input(z.object({
1771
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1372
1772
  projectId: z.string().describe("The ID of the project to create the environment for"),
1373
1773
  name: z.string().min(1).describe("The name of the environment"),
1374
1774
  sourceBranch: z.string().min(1).describe("The branch used to build the environment"),
@@ -1381,7 +1781,7 @@ const createEnvironmentContractV1 = oc.route({
1381
1781
  createdAt: z.coerce.date(),
1382
1782
  projectId: z.string().describe("The ID of the project the environment belongs to")
1383
1783
  }));
1384
- const getEnvironmentContractV1 = oc.route({
1784
+ const getEnvironmentContractV1 = base.route({
1385
1785
  path: "/v1/environments/{environmentId}",
1386
1786
  method: "GET",
1387
1787
  summary: "Get an environment",
@@ -1397,6 +1797,14 @@ const getEnvironmentContractV1 = oc.route({
1397
1797
  createdAt: z.coerce.date(),
1398
1798
  projectId: z.string()
1399
1799
  }));
1800
+ const deleteEnvironmentContractV1 = base.route({
1801
+ path: "/v1/environments/{environmentId}",
1802
+ method: "DELETE",
1803
+ summary: "Delete an environment",
1804
+ description: "All environments can be deleted except the production environment. This operation is not reversible: associated logs, analytics, and metrics are deleted as well.",
1805
+ tags: ["environments"],
1806
+ successDescription: "The environment has been deleted successfully"
1807
+ }).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.object({ success: z.literal(true) }));
1400
1808
  const domainSchema = z.object({
1401
1809
  domain: z.string(),
1402
1810
  status: z.enum([
@@ -1438,7 +1846,7 @@ const projectOutputSchema = z.object({
1438
1846
  productionEnvironment: productionEnvironmentSchema.nullable(),
1439
1847
  environments: z.array(environmentSchema)
1440
1848
  });
1441
- const getProjectContractV1 = oc.route({
1849
+ const getProjectContractV1 = base.route({
1442
1850
  path: "/v1/projects/{projectId}",
1443
1851
  method: "GET",
1444
1852
  summary: "Get a project",
@@ -1446,18 +1854,15 @@ const getProjectContractV1 = oc.route({
1446
1854
  tags: ["projects"],
1447
1855
  successDescription: "The project details"
1448
1856
  }).errors({ NOT_FOUND: {} }).input(z.object({ projectId: z.string().describe("The ID of the project") })).output(projectOutputSchema);
1449
- const listProjectsContractV1 = oc.route({
1857
+ const listProjectsContractV1 = base.route({
1450
1858
  path: "/v1/projects",
1451
1859
  method: "GET",
1452
1860
  summary: "List projects",
1453
1861
  description: "List all projects for a team",
1454
1862
  tags: ["projects"],
1455
1863
  successDescription: "The list of projects"
1456
- }).errors({
1457
- NOT_FOUND: {},
1458
- BAD_REQUEST: {}
1459
- }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.array(projectOutputSchema));
1460
- const createProjectContractV1 = oc.route({
1864
+ }).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.array(projectOutputSchema));
1865
+ const createProjectContractV1 = base.route({
1461
1866
  path: "/v1/projects",
1462
1867
  method: "POST",
1463
1868
  summary: "Create a project",
@@ -1466,7 +1871,6 @@ const createProjectContractV1 = oc.route({
1466
1871
  successDescription: "The project has been created successfully"
1467
1872
  }).errors({
1468
1873
  NOT_FOUND: {},
1469
- BAD_REQUEST: {},
1470
1874
  FORBIDDEN: {}
1471
1875
  }).input(z.object({
1472
1876
  teamId: z.string().optional(),
@@ -1507,7 +1911,7 @@ const environmentVariableOutputSchema = z.object({
1507
1911
  isSecret: z.boolean(),
1508
1912
  createdAt: z.coerce.date()
1509
1913
  });
1510
- const listEnvironmentVariablesContractV1 = oc.route({
1914
+ const listEnvironmentVariablesContractV1 = base.route({
1511
1915
  path: "/v1/environments/{environmentId}/environment-variables",
1512
1916
  method: "GET",
1513
1917
  summary: "List environment variables",
@@ -1515,48 +1919,39 @@ const listEnvironmentVariablesContractV1 = oc.route({
1515
1919
  tags: ["environments"],
1516
1920
  successDescription: "The list of environment variables"
1517
1921
  }).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.array(environmentVariableOutputSchema));
1518
- const createEnvironmentVariablesContractV1 = oc.route({
1922
+ const createEnvironmentVariablesContractV1 = base.route({
1519
1923
  path: "/v1/environments/{environmentId}/environment-variables",
1520
1924
  method: "POST",
1521
1925
  summary: "Add environment variables",
1522
1926
  description: "Add one or more environment variables to an environment",
1523
1927
  tags: ["environments"],
1524
1928
  successDescription: "The environment variables have been added successfully"
1525
- }).errors({
1526
- NOT_FOUND: {},
1527
- BAD_REQUEST: {}
1528
- }).input(z.object({
1929
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1529
1930
  environmentId: z.string().describe("The ID of the environment"),
1530
1931
  environmentVariables: environmentVariablesSchema
1531
1932
  })).output(z.object({ success: z.literal(true) }));
1532
- const updateEnvironmentVariableContractV1 = oc.route({
1933
+ const updateEnvironmentVariableContractV1 = base.route({
1533
1934
  path: "/v1/environment-variables/{environmentVariableId}",
1534
1935
  method: "PATCH",
1535
1936
  summary: "Update an environment variable",
1536
1937
  description: "Update an environment variable by ID",
1537
1938
  tags: ["environments"],
1538
1939
  successDescription: "The environment variable has been updated successfully"
1539
- }).errors({
1540
- NOT_FOUND: {},
1541
- BAD_REQUEST: {}
1542
- }).input(z.object({
1940
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1543
1941
  environmentVariableId: z.string().describe("The ID of the environment variable"),
1544
1942
  key: environmentVariableSchema.shape.key,
1545
1943
  value: environmentVariableSchema.shape.value.optional(),
1546
1944
  isSecret: environmentVariableSchema.shape.isSecret.optional()
1547
1945
  })).output(z.object({ success: z.literal(true) }));
1548
- const deleteEnvironmentVariableContractV1 = oc.route({
1946
+ const deleteEnvironmentVariableContractV1 = base.route({
1549
1947
  path: "/v1/environment-variables/{environmentVariableId}",
1550
1948
  method: "DELETE",
1551
1949
  summary: "Delete an environment variable",
1552
1950
  description: "Delete an environment variable by ID",
1553
1951
  tags: ["environments"],
1554
1952
  successDescription: "The environment variable has been deleted successfully"
1555
- }).errors({
1556
- NOT_FOUND: {},
1557
- BAD_REQUEST: {}
1558
- }).input(z.object({ environmentVariableId: z.string().describe("The ID of the environment variable") })).output(z.object({ success: z.literal(true) }));
1559
- const deleteProjectContractV1 = oc.route({
1953
+ }).errors({ NOT_FOUND: {} }).input(z.object({ environmentVariableId: z.string().describe("The ID of the environment variable") })).output(z.object({ success: z.literal(true) }));
1954
+ const deleteProjectContractV1 = base.route({
1560
1955
  path: "/v1/projects/{projectId}",
1561
1956
  method: "DELETE",
1562
1957
  summary: "Delete a project",
@@ -1564,7 +1959,7 @@ const deleteProjectContractV1 = oc.route({
1564
1959
  tags: ["projects"],
1565
1960
  successDescription: "The project has been deleted successfully"
1566
1961
  }).errors({ NOT_FOUND: {} }).input(z.object({ projectId: z.string().describe("The ID of the project") })).output(z.object({ success: z.literal(true) }));
1567
- const updateProjectContractV1 = oc.route({
1962
+ const updateProjectContractV1 = base.route({
1568
1963
  path: "/v1/projects/{projectId}",
1569
1964
  method: "PATCH",
1570
1965
  summary: "Update a project",
@@ -1573,14 +1968,13 @@ const updateProjectContractV1 = oc.route({
1573
1968
  successDescription: "The project has been updated successfully"
1574
1969
  }).errors({
1575
1970
  NOT_FOUND: {},
1576
- BAD_REQUEST: {},
1577
1971
  FORBIDDEN: {}
1578
1972
  }).input(z.object({
1579
1973
  projectId: z.string().describe("The ID of the project"),
1580
1974
  name: z.string().min(1).max(100).optional().describe("The new name for the project"),
1581
1975
  sourceRepository: z.string().nullable().optional().describe("The source repository to connect to the project")
1582
1976
  })).output(projectOutputSchema);
1583
- const deployEnvironmentContractV1 = oc.route({
1977
+ const deployEnvironmentContractV1 = base.route({
1584
1978
  path: "/v1/environments/{environmentId}/deploy",
1585
1979
  method: "POST",
1586
1980
  summary: "Deploy an environment",
@@ -1589,29 +1983,25 @@ const deployEnvironmentContractV1 = oc.route({
1589
1983
  successDescription: "The environment has been deployed successfully"
1590
1984
  }).errors({
1591
1985
  NOT_FOUND: {},
1592
- BAD_REQUEST: {},
1593
1986
  CONFLICT: {}
1594
1987
  }).input(z.object({
1595
1988
  environmentId: z.string().describe("The ID of the environment to deploy"),
1596
1989
  token: z.string().describe("The token to identify the source archive").optional(),
1597
1990
  settings: buildSettingsSchema.extend({ transport: transportSchema }).optional().describe("Project settings detected by the client from the source. When provided, the server skips downloading and extracting the source archive to detect them.")
1598
1991
  })).output(deploymentSchema);
1599
- const uploadDeploymentArtifactContractV1 = oc.route({
1992
+ const uploadDeploymentArtifactContractV1 = base.route({
1600
1993
  path: "/v1/deployments/upload",
1601
1994
  method: "POST",
1602
1995
  summary: "Upload deployment artifacts",
1603
1996
  description: "Return a presigned S3 URL to upload a deployment artifact",
1604
1997
  tags: ["deployments"],
1605
1998
  successDescription: "The presigned upload URL has been generated successfully"
1606
- }).errors({
1607
- NOT_FOUND: {},
1608
- BAD_REQUEST: {}
1609
- }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.object({
1999
+ }).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.object({
1610
2000
  uploadUrl: z.url().describe("Presigned S3 URL to upload the source archive with HTTP PUT"),
1611
2001
  token: z.string().describe("Token to identify the source archive"),
1612
2002
  expiresAt: z.coerce.date().describe("Expiration date of the presigned URL")
1613
2003
  }));
1614
- const listDeploymentsContractV1 = oc.route({
2004
+ const listDeploymentsContractV1 = base.route({
1615
2005
  path: "/v1/projects/{projectId}/deployments",
1616
2006
  method: "GET",
1617
2007
  summary: "List project deployments",
@@ -1623,7 +2013,7 @@ const listDeploymentsContractV1 = oc.route({
1623
2013
  status: z.array(deploymentStatusSchema).optional().describe("Filter by one or more statuses"),
1624
2014
  environmentId: z.string().optional().describe("Filter by environment ID")
1625
2015
  })).output(z.array(deploymentSchema));
1626
- const getDeploymentContractV1 = oc.route({
2016
+ const getDeploymentContractV1 = base.route({
1627
2017
  path: "/v1/deployments/{deploymentId}",
1628
2018
  method: "GET",
1629
2019
  summary: "Get a deployment",
@@ -1646,20 +2036,17 @@ const logEntrySchema = z.object({
1646
2036
  method: z.string().optional(),
1647
2037
  durationInMs: z.number().optional()
1648
2038
  });
1649
- const getLogsContractV1 = oc.route({
2039
+ const getLogsContractV1 = base.route({
1650
2040
  path: "/v1/environments/{environmentId}/logs",
1651
2041
  method: "GET",
1652
2042
  summary: "Get logs",
1653
2043
  description: "Get logs for an environment",
1654
2044
  tags: ["environments"],
1655
2045
  successDescription: "The logs"
1656
- }).errors({
1657
- NOT_FOUND: {},
1658
- BAD_REQUEST: {}
1659
- }).input(z.object({
2046
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1660
2047
  environmentId: z.string().describe("The ID of the environment"),
1661
- since: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
1662
- until: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("End time — ISO 8601 or relative"),
2048
+ since: timeInputSchema.optional().describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
2049
+ until: timeInputSchema.optional().describe("End time — ISO 8601 or relative"),
1663
2050
  limit: z.coerce.number().int().min(1).max(1e3).default(1e3).describe("Maximum number of log entries to return."),
1664
2051
  level: z.array(z.enum([
1665
2052
  "INFO",
@@ -1667,23 +2054,20 @@ const getLogsContractV1 = oc.route({
1667
2054
  "WARNING",
1668
2055
  "DEBUG"
1669
2056
  ])).optional().describe("Filter by log level"),
1670
- search: z.string().optional().describe("Filter pattern to search for in log content"),
2057
+ search: logSearchSchema.optional().describe("Term to search for in log content"),
1671
2058
  nextToken: z.string().optional().describe("Pagination token from a previous response")
1672
2059
  })).output(z.object({
1673
2060
  logs: z.array(logEntrySchema),
1674
2061
  nextToken: z.string().nullable()
1675
2062
  }));
1676
- const getLatestLogsContractV1 = oc.route({
2063
+ const getLatestLogsContractV1 = base.route({
1677
2064
  path: "/v1/environments/{environmentId}/latest-logs",
1678
2065
  method: "GET",
1679
2066
  summary: "Get latest logs",
1680
2067
  description: "Get the N most recent logs for an environment",
1681
2068
  tags: ["environments"],
1682
2069
  successDescription: "The latest logs"
1683
- }).errors({
1684
- NOT_FOUND: {},
1685
- BAD_REQUEST: {}
1686
- }).input(z.object({
2070
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1687
2071
  environmentId: z.string().describe("The ID of the environment"),
1688
2072
  limit: z.coerce.number().int().min(1).max(1e3).default(100).describe("Number of most recent log entries to return"),
1689
2073
  level: z.array(z.enum([
@@ -1692,9 +2076,9 @@ const getLatestLogsContractV1 = oc.route({
1692
2076
  "WARNING",
1693
2077
  "DEBUG"
1694
2078
  ])).optional().describe("Filter by log level"),
1695
- search: z.string().optional().describe("Filter pattern to search for in log content")
2079
+ search: logSearchSchema.optional().describe("Term to search for in log content")
1696
2080
  })).output(z.object({ logs: z.array(logEntrySchema) }));
1697
- const getDeploymentLogsContractV1 = oc.route({
2081
+ const getDeploymentLogsContractV1 = base.route({
1698
2082
  path: "/v1/deployments/{deploymentId}/logs",
1699
2083
  method: "GET",
1700
2084
  summary: "Get deployment logs",
@@ -1721,22 +2105,19 @@ const analyticsTimeSeriesSchema = z.object({
1721
2105
  output_token_mean: z.array(analyticsDataPointSchema),
1722
2106
  task_count: z.array(analyticsDataPointSchema)
1723
2107
  });
1724
- const getProjectAnalyticsContractV1 = oc.route({
2108
+ const getProjectAnalyticsContractV1 = base.route({
1725
2109
  path: "/v1/analytics/{projectId}",
1726
2110
  method: "GET",
1727
2111
  summary: "Get project analytics",
1728
2112
  description: "Get analytics data for a project over a time range",
1729
2113
  tags: ["analytics"],
1730
2114
  successDescription: "The project analytics data"
1731
- }).errors({
1732
- NOT_FOUND: {},
1733
- BAD_REQUEST: {}
1734
- }).input(z.object({
2115
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1735
2116
  projectId: z.string().describe("The ID of the project"),
1736
2117
  startTimestamp: z.coerce.number().describe("Start timestamp in milliseconds"),
1737
2118
  endTimestamp: z.coerce.number().describe("End timestamp in milliseconds"),
1738
2119
  timeZone: z.string().describe("IANA timezone (e.g. Europe/Paris)")
1739
- }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp > 0, { message: "End date must be after start date" }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp <= 744 * 60 * 60 * 1e3, { message: "Date range must be less than 1 month" }).refine(({ timeZone }) => Intl.supportedValuesOf("timeZone").includes(timeZone), { message: "Time zone must be a valid IANA timezone" })).output(z.object({
2120
+ }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp > 0, { message: "End date must be after start date" }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp <= 26784e5, { message: "Date range must be less than 1 month" }).refine(({ timeZone }) => isValidIanaTimeZone(timeZone), { message: "Time zone must be a valid IANA timezone" })).output(z.object({
1740
2121
  metadata: z.object({
1741
2122
  startTimestamp: z.number(),
1742
2123
  endTimestamp: z.number(),
@@ -1746,7 +2127,132 @@ const getProjectAnalyticsContractV1 = oc.route({
1746
2127
  }),
1747
2128
  timeSeries: analyticsTimeSeriesSchema
1748
2129
  }));
1749
- const listTeamsContractV1 = oc.route({
2130
+ const paginatedInsightsInputShape = {
2131
+ environmentId: z.string().describe("The ID of the environment"),
2132
+ since: timeInputSchema.default("7d").describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
2133
+ until: timeInputSchema.optional().describe("End time — ISO 8601 or relative"),
2134
+ limit: z.coerce.number().int().min(1).max(200).default(50),
2135
+ offset: z.coerce.number().int().min(0).default(0),
2136
+ search: z.string().trim().min(1).max(200).optional()
2137
+ };
2138
+ const listIntentsContractV1 = base.route({
2139
+ path: "/v1/environments/{environmentId}/intents",
2140
+ method: "GET",
2141
+ summary: "List intents",
2142
+ description: "List grouped user intents for an environment over a time range",
2143
+ tags: ["insights"],
2144
+ successDescription: "The grouped user intents"
2145
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2146
+ ...paginatedInsightsInputShape,
2147
+ tools: z.array(z.string().trim().min(1)).min(1).max(100).optional(),
2148
+ clientIds: z.array(z.string().min(1)).min(1).max(100).optional(),
2149
+ categoryIds: z.array(z.string().trim().min(1)).min(1).max(100).optional(),
2150
+ sortDir: z.enum(["asc", "desc"]).default("desc")
2151
+ })).output(z.object({
2152
+ intents: z.array(z.object({
2153
+ id: z.string(),
2154
+ intentIds: z.array(z.string()).min(1),
2155
+ environmentId: z.string(),
2156
+ message: z.string(),
2157
+ toolName: z.string(),
2158
+ createdAt: z.coerce.date(),
2159
+ occurrenceCount: z.number().int().positive(),
2160
+ clientName: z.string().nullable(),
2161
+ clientId: z.string().nullable(),
2162
+ categories: z.array(z.object({
2163
+ id: z.string(),
2164
+ name: z.string(),
2165
+ color: intentCategoryColorSchema
2166
+ }))
2167
+ })),
2168
+ totalCount: z.number().int().nonnegative()
2169
+ }));
2170
+ const listFeedbacksContractV1 = base.route({
2171
+ path: "/v1/environments/{environmentId}/feedbacks",
2172
+ method: "GET",
2173
+ summary: "List feedbacks",
2174
+ description: "List user feedback for an environment over a time range",
2175
+ tags: ["insights"],
2176
+ successDescription: "The user feedback"
2177
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2178
+ ...paginatedInsightsInputShape,
2179
+ clientIds: z.array(z.string().min(1)).min(1).max(100).optional()
2180
+ })).output(z.object({
2181
+ feedbacks: z.array(feedbackSchema.extend({ clientId: z.string().nullable() })),
2182
+ totalCount: z.number().int().nonnegative()
2183
+ }));
2184
+ const intentCategoryNameSchema = z.string().trim().min(1).max(100).describe("The category name");
2185
+ const categorizableIntentIdsSchema = z.array(z.string().trim().min(1)).min(1).max(100).describe("IDs of the intents to categorize");
2186
+ const listIntentCategoriesContractV1 = base.route({
2187
+ path: "/v1/environments/{environmentId}/intent-categories",
2188
+ method: "GET",
2189
+ summary: "List intent categories",
2190
+ description: "List intent categories for an environment, including how many intents each category is linked to",
2191
+ tags: ["insights"],
2192
+ successDescription: "The intent categories"
2193
+ }).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.array(intentCategorySummarySchema));
2194
+ const createIntentCategoryContractV1 = base.route({
2195
+ path: "/v1/environments/{environmentId}/intent-categories",
2196
+ method: "POST",
2197
+ summary: "Create an intent category",
2198
+ description: "Create an intent category, optionally linking it to existing intents",
2199
+ tags: ["insights"],
2200
+ successDescription: "The created intent category"
2201
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2202
+ environmentId: z.string().describe("The ID of the environment"),
2203
+ name: intentCategoryNameSchema,
2204
+ color: intentCategoryColorSchema.optional().describe("The category color; derived from the name when omitted"),
2205
+ intentIds: categorizableIntentIdsSchema.optional().describe("IDs of intents to link to the new category")
2206
+ })).output(intentCategorySchema);
2207
+ const updateIntentCategoryContractV1 = base.route({
2208
+ path: "/v1/environments/{environmentId}/intent-categories/{categoryId}",
2209
+ method: "PATCH",
2210
+ summary: "Update an intent category",
2211
+ description: "Rename or recolor an intent category",
2212
+ tags: ["insights"],
2213
+ successDescription: "The updated intent category"
2214
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2215
+ environmentId: z.string().describe("The ID of the environment"),
2216
+ categoryId: z.string().describe("The ID of the category"),
2217
+ name: intentCategoryNameSchema.optional(),
2218
+ color: intentCategoryColorSchema.optional().describe("The category color")
2219
+ }).refine(({ name, color }) => name !== void 0 || color !== void 0, { message: "At least one of name or color must be provided" })).output(intentCategorySchema);
2220
+ const deleteIntentCategoryContractV1 = base.route({
2221
+ path: "/v1/environments/{environmentId}/intent-categories/{categoryId}",
2222
+ method: "DELETE",
2223
+ summary: "Delete an intent category",
2224
+ description: "Delete an intent category; its intents are unlinked but not deleted",
2225
+ tags: ["insights"],
2226
+ successDescription: "The intent category has been deleted successfully"
2227
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2228
+ environmentId: z.string().describe("The ID of the environment"),
2229
+ categoryId: z.string().describe("The ID of the category")
2230
+ })).output(z.object({ success: z.literal(true) }));
2231
+ const linkIntentCategoryContractV1 = base.route({
2232
+ path: "/v1/environments/{environmentId}/intent-categories/{categoryId}/link",
2233
+ method: "POST",
2234
+ summary: "Link an intent category",
2235
+ description: "Link an intent category to intents; already linked intents are ignored",
2236
+ tags: ["insights"],
2237
+ successDescription: "The intents have been linked successfully"
2238
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2239
+ environmentId: z.string().describe("The ID of the environment"),
2240
+ categoryId: z.string().describe("The ID of the category"),
2241
+ intentIds: categorizableIntentIdsSchema
2242
+ })).output(z.object({ success: z.literal(true) }));
2243
+ const unlinkIntentCategoryContractV1 = base.route({
2244
+ path: "/v1/environments/{environmentId}/intent-categories/{categoryId}/unlink",
2245
+ method: "POST",
2246
+ summary: "Unlink an intent category",
2247
+ description: "Unlink an intent category from intents; intents without the category are ignored",
2248
+ tags: ["insights"],
2249
+ successDescription: "The intents have been unlinked successfully"
2250
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2251
+ environmentId: z.string().describe("The ID of the environment"),
2252
+ categoryId: z.string().describe("The ID of the category"),
2253
+ intentIds: categorizableIntentIdsSchema
2254
+ })).output(z.object({ success: z.literal(true) }));
2255
+ const listTeamsContractV1 = base.route({
1750
2256
  path: "/v1/teams",
1751
2257
  method: "GET",
1752
2258
  summary: "List teams",
@@ -1759,7 +2265,22 @@ const listTeamsContractV1 = oc.route({
1759
2265
  createdAt: z.coerce.date(),
1760
2266
  hasStripeAccount: z.boolean()
1761
2267
  })));
1762
- const getTunnelTicketContractV1 = oc.route({
2268
+ const getTeamUsageContractV1 = base.route({
2269
+ path: "/v1/teams/{teamId}/usage",
2270
+ method: "GET",
2271
+ summary: "Get team usage",
2272
+ description: "Get the MCP request usage of a team for its current billing window. A team that has made no request in the window reports zero.",
2273
+ tags: ["teams"],
2274
+ successDescription: "The current billing window usage"
2275
+ }).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().describe("The ID of the team") })).output(z.object({
2276
+ teamId: z.string(),
2277
+ plan: subscriptionPlanSchema.nullable().describe("The plan in force for the window, null on the Free plan"),
2278
+ periodStart: z.coerce.date().describe("Start of the current billing window"),
2279
+ periodEnd: z.coerce.date().describe("End of the current billing window"),
2280
+ requestCount: z.number().int().describe("MCP requests settled during the current billing window"),
2281
+ includedRequests: z.number().int().nullable().describe("Requests included in the plan for one window, null when the allowance is contract-specific")
2282
+ }));
2283
+ const getTunnelTicketContractV1 = base.route({
1763
2284
  path: "/v1/tunnels/ticket",
1764
2285
  method: "GET",
1765
2286
  summary: "Get a tunnel ticket",
@@ -1771,16 +2292,13 @@ const getTunnelTicketContractV1 = oc.route({
1771
2292
  ticket: z.string().describe("The signed tunnel ticket"),
1772
2293
  tunnelHost: z.string().describe("The tunnel host to connect to")
1773
2294
  }));
1774
- const publishServerContractV1 = oc.route({
2295
+ const publishServerContractV1 = base.route({
1775
2296
  path: "/v1/distribution/publish",
1776
2297
  method: "POST",
1777
2298
  summary: "Publish a server to the MCP registry",
1778
2299
  tags: ["distribution"],
1779
2300
  successDescription: "The server has been published successfully"
1780
- }).errors({
1781
- NOT_FOUND: {},
1782
- BAD_REQUEST: {}
1783
- }).input(z.object({
2301
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1784
2302
  projectId: z.string(),
1785
2303
  domain: z.string(),
1786
2304
  title: z.string().min(1).max(100),
@@ -1789,17 +2307,14 @@ const publishServerContractV1 = oc.route({
1789
2307
  iconSrc: z.url().max(255).optional(),
1790
2308
  dryRun: z.boolean().optional()
1791
2309
  })).output(z.object({ serverFields: serverFieldsSchema }));
1792
- const getServerInfoContractV1 = oc.route({
2310
+ const getServerInfoContractV1 = base.route({
1793
2311
  path: "/v1/distribution/get",
1794
2312
  method: "GET",
1795
2313
  summary: "Get server info",
1796
2314
  description: "Get info about a server",
1797
2315
  tags: ["distribution"],
1798
2316
  successDescription: "The server info"
1799
- }).errors({
1800
- NOT_FOUND: {},
1801
- BAD_REQUEST: {}
1802
- }).input(z.object({
2317
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1803
2318
  projectId: z.string(),
1804
2319
  domain: z.string()
1805
2320
  })).output(z.object({ serverFields: serverFieldsSchema }));
@@ -1818,7 +2333,7 @@ const playgroundOutputSchema = z.object({
1818
2333
  isPlaygroundEnabled: z.boolean(),
1819
2334
  serverMetadata: playgroundServerMetadataOutputSchema.nullable()
1820
2335
  });
1821
- const getPlaygroundContractV1 = oc.route({
2336
+ const getPlaygroundContractV1 = base.route({
1822
2337
  path: "/v1/environments/{environmentId}/playground",
1823
2338
  method: "GET",
1824
2339
  summary: "Get playground configuration",
@@ -1826,17 +2341,14 @@ const getPlaygroundContractV1 = oc.route({
1826
2341
  tags: ["environments"],
1827
2342
  successDescription: "The playground configuration"
1828
2343
  }).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(playgroundOutputSchema);
1829
- const upsertPlaygroundContractV1 = oc.route({
2344
+ const upsertPlaygroundContractV1 = base.route({
1830
2345
  path: "/v1/environments/{environmentId}/playground",
1831
2346
  method: "PUT",
1832
2347
  summary: "Update playground configuration",
1833
2348
  description: "Update the playground configuration for an environment. All fields are optional — only provided fields are updated.",
1834
2349
  tags: ["environments"],
1835
2350
  successDescription: "The updated playground configuration"
1836
- }).errors({
1837
- NOT_FOUND: {},
1838
- BAD_REQUEST: {}
1839
- }).input(z.object({
2351
+ }).errors({ NOT_FOUND: {} }).input(z.object({
1840
2352
  environmentId: z.string().describe("The ID of the environment"),
1841
2353
  isPlaygroundEnabled: z.boolean().optional(),
1842
2354
  name: z.string().min(1).max(100).optional(),
@@ -1844,7 +2356,7 @@ const upsertPlaygroundContractV1 = oc.route({
1844
2356
  headers: z.array(playgroundHeaderSchema).optional(),
1845
2357
  examplePrompts: z.array(playgroundExamplePromptSchema).max(5).optional()
1846
2358
  })).output(playgroundOutputSchema);
1847
- const createBeaconContractV1 = oc.route({
2359
+ const createBeaconContractV1 = base.route({
1848
2360
  path: "/v1/beacon/audits",
1849
2361
  method: "POST",
1850
2362
  summary: "Create a beacon audit",
@@ -1853,7 +2365,6 @@ const createBeaconContractV1 = oc.route({
1853
2365
  successDescription: "The audit has been created"
1854
2366
  }).errors({
1855
2367
  NOT_FOUND: {},
1856
- BAD_REQUEST: {},
1857
2368
  DNS_RESOLUTION_FAILED: { status: 400 }
1858
2369
  }).input(z.object({
1859
2370
  targetUrl: z.url().describe("The HTTPS URL of the MCP server to audit"),
@@ -1861,7 +2372,7 @@ const createBeaconContractV1 = oc.route({
1861
2372
  projectId: z.string().optional().describe("The project ID to associate the audit with"),
1862
2373
  excludeCategories: z.array(checkCategorySchema).optional().describe("Check categories to exclude from the audit")
1863
2374
  })).output(z.object({ id: z.string() }));
1864
- const getBeaconContractV1 = oc.route({
2375
+ const getBeaconContractV1 = base.route({
1865
2376
  path: "/v1/beacon/audits/{auditId}",
1866
2377
  method: "GET",
1867
2378
  summary: "Get a beacon audit",
@@ -1876,9 +2387,73 @@ const getBeaconContractV1 = oc.route({
1876
2387
  createdAt: z.coerce.date(),
1877
2388
  report: auditReportWithScreenshotsSchema.nullable()
1878
2389
  }));
2390
+ const PLATFORM_DESCRIPTION = "The directory the package targets: `chatgpt` for the OpenAI App Directory, `claudeai` for the Anthropic MCP Directory";
2391
+ const submissionIdSchema = z.string().describe("The ID of the submission package");
2392
+ const claudeSubmissionUpdateSchema = claudeSubmissionDraftSchema.strict();
2393
+ const chatgptSubmissionUpdateSchema = chatgptSubmissionDraftSchema.strict();
2394
+ const createSubmissionContractV1 = base.route({
2395
+ path: "/v1/submissions",
2396
+ method: "POST",
2397
+ summary: "Create a submission package",
2398
+ description: "Create a submission package for an environment. Alpic reads the environment's live MCP server and prefills every field it can infer, so the response already carries the populated package. The environment must have a successful deployment and must not require authentication.",
2399
+ tags: ["submissions"],
2400
+ successDescription: "The created submission package, with its prefilled fields"
2401
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2402
+ environmentId: z.string().describe("The ID of the environment to build the package from"),
2403
+ platform: platformSchema.describe(PLATFORM_DESCRIPTION)
2404
+ })).output(submissionSchema);
2405
+ const listSubmissionsContractV1 = base.route({
2406
+ path: "/v1/projects/{projectId}/submissions",
2407
+ method: "GET",
2408
+ summary: "List submission packages",
2409
+ description: "List the submission packages of a project, grouped by directory and most recently updated first, optionally narrowed to one environment or one directory",
2410
+ tags: ["submissions"],
2411
+ successDescription: "The list of submission packages"
2412
+ }).errors({ NOT_FOUND: {} }).input(z.object({
2413
+ projectId: z.string().describe("The ID of the project"),
2414
+ environmentId: z.string().optional().describe("Filter by environment ID"),
2415
+ platform: platformSchema.optional().describe(PLATFORM_DESCRIPTION)
2416
+ })).output(z.array(submissionSchema));
2417
+ const getSubmissionContractV1 = base.route({
2418
+ path: "/v1/submissions/{submissionId}",
2419
+ method: "GET",
2420
+ summary: "Get a submission package",
2421
+ description: "Get a submission package by ID, including its form data and the prefill it started from",
2422
+ tags: ["submissions"],
2423
+ successDescription: "The submission package"
2424
+ }).errors({ NOT_FOUND: {} }).input(z.object({ submissionId: submissionIdSchema })).output(submissionSchema);
2425
+ const updateSubmissionContractV1 = base.route({
2426
+ path: "/v1/submissions/{submissionId}",
2427
+ method: "PUT",
2428
+ summary: "Update a submission package",
2429
+ description: "Update the form data of a submission package. Only the fields you send are changed; the rest are left as they are. Unknown field names are rejected rather than ignored, so a typo fails the call. `platform` must match the package's own platform.",
2430
+ tags: ["submissions"],
2431
+ successDescription: "The updated submission package"
2432
+ }).errors({ NOT_FOUND: {} }).input(z.discriminatedUnion("platform", [z.object({
2433
+ submissionId: submissionIdSchema,
2434
+ platform: z.literal("claudeai").describe(PLATFORM_DESCRIPTION),
2435
+ formData: claudeSubmissionUpdateSchema
2436
+ }), z.object({
2437
+ submissionId: submissionIdSchema,
2438
+ platform: z.literal("chatgpt").describe(PLATFORM_DESCRIPTION),
2439
+ formData: chatgptSubmissionUpdateSchema
2440
+ })])).output(submissionSchema);
1879
2441
  const contract = {
1880
- teams: { list: { v1: listTeamsContractV1 } },
2442
+ teams: {
2443
+ list: { v1: listTeamsContractV1 },
2444
+ getUsage: { v1: getTeamUsageContractV1 }
2445
+ },
1881
2446
  analytics: { get: { v1: getProjectAnalyticsContractV1 } },
2447
+ intents: { list: { v1: listIntentsContractV1 } },
2448
+ intentCategories: {
2449
+ list: { v1: listIntentCategoriesContractV1 },
2450
+ create: { v1: createIntentCategoryContractV1 },
2451
+ update: { v1: updateIntentCategoryContractV1 },
2452
+ delete: { v1: deleteIntentCategoryContractV1 },
2453
+ link: { v1: linkIntentCategoryContractV1 },
2454
+ unlink: { v1: unlinkIntentCategoryContractV1 }
2455
+ },
2456
+ feedbacks: { list: { v1: listFeedbacksContractV1 } },
1882
2457
  deployments: {
1883
2458
  list: { v1: listDeploymentsContractV1 },
1884
2459
  get: { v1: getDeploymentContractV1 },
@@ -1888,6 +2463,7 @@ const contract = {
1888
2463
  environments: {
1889
2464
  create: { v1: createEnvironmentContractV1 },
1890
2465
  get: { v1: getEnvironmentContractV1 },
2466
+ delete: { v1: deleteEnvironmentContractV1 },
1891
2467
  deploy: { v1: deployEnvironmentContractV1 },
1892
2468
  getLogs: { v1: getLogsContractV1 },
1893
2469
  getLatestLogs: { v1: getLatestLogsContractV1 }
@@ -1917,6 +2493,12 @@ const contract = {
1917
2493
  beacon: {
1918
2494
  create: { v1: createBeaconContractV1 },
1919
2495
  get: { v1: getBeaconContractV1 }
2496
+ },
2497
+ submissions: {
2498
+ create: { v1: createSubmissionContractV1 },
2499
+ list: { v1: listSubmissionsContractV1 },
2500
+ get: { v1: getSubmissionContractV1 },
2501
+ update: { v1: updateSubmissionContractV1 }
1920
2502
  }
1921
2503
  };
1922
2504
  const { uploadArtifact: _discard, ...deploymentsForDocs } = contract.deployments;
@@ -1924,5 +2506,26 @@ const contractForDocs = {
1924
2506
  ...contract,
1925
2507
  deployments: deploymentsForDocs
1926
2508
  };
2509
+ /** Shared by the served `openapi.json` and the snapshot test that guards it, so the two cannot drift. */
2510
+ const OPENAPI_DOC_OPTIONS = {
2511
+ info: {
2512
+ title: "Alpic API",
2513
+ version: "1.0.0"
2514
+ },
2515
+ servers: [{ url: "https://api.alpic.ai" }],
2516
+ security: [{ bearerAuth: [] }],
2517
+ components: { securitySchemes: { bearerAuth: {
2518
+ type: "http",
2519
+ description: "Bearer token for authentication. Use an API key from the API Keys page in team settings, or an OAuth access token.",
2520
+ scheme: "bearer"
2521
+ } } },
2522
+ commonSchemas: {
2523
+ Submission: { schema: submissionSchema },
2524
+ ClaudeSubmissionFormData: { schema: claudeSubmissionDraftSchema },
2525
+ ChatgptSubmissionFormData: { schema: chatgptSubmissionDraftSchema },
2526
+ ClaudeSubmissionFormDataUpdate: { schema: claudeSubmissionUpdateSchema },
2527
+ ChatgptSubmissionFormDataUpdate: { schema: chatgptSubmissionUpdateSchema }
2528
+ }
2529
+ };
1927
2530
  //#endregion
1928
- export { AUTH_SCOPE_ANY, AUTH_SCOPE_USER, PLATFORM_LABELS, buildSettingsSchema, contract, contractForDocs, createEnvironmentContractV1, deploymentStatusSchema, environmentVariableSchema, environmentVariablesSchema, playgroundExamplePromptSchema, playgroundHeaderSchema, runtimeSchema, serverFieldsSchema, transportSchema, updateEnvironmentVariableSchema };
2531
+ export { AI_PLATFORMS, AUTH_SCOPE_ANY, AUTH_SCOPE_USER, INTENT_CATEGORY_COLORS, OPENAPI_DOC_OPTIONS, PLATFORM_LABELS, buildSettingsSchema, chatgptSubmissionUpdateSchema, claudeSubmissionUpdateSchema, contract, contractForDocs, createEnvironmentContractV1, deploymentStatusSchema, environmentVariableSchema, environmentVariablesSchema, intentCategoryColorSchema, playgroundExamplePromptSchema, playgroundHeaderSchema, runtimeSchema, serverFieldsSchema, transportSchema, updateEnvironmentVariableSchema };