@alpic-ai/api 0.0.0-dev.gff0a01e → 0.0.0-dev.gff1b65e

package/dist/index.d.mts

@@ -212,7 +212,7 @@ declare const contract: {
         name: z.ZodString;
         sourceBranch: z.ZodNullable<z.ZodString>;
         mcpServerUrl: z.ZodString;
-        domains: z.ZodArray<z.ZodURL>;
+        domains: z.ZodArray<z.ZodCustomStringFormat<"hostname">>;
         createdAt: z.ZodCoercedDate<unknown>;
         projectId: z.ZodString;
       }, z.core.$strip>, _$_orpc_contract0.MergedErrorMap<Record<never, never>, {

package/dist/index.mjs

@@ -1,6 +1,174 @@
 import { z } from "zod";
+import * as z$1 from "zod/v4";
 import { oc } from "@orpc/contract";
 import ms from "ms";
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_@cfworker+json-schema@4.1.1_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+/**
+* Reusable URL validation that disallows javascript: scheme
+*/
+const SafeUrlSchema = z$1.url().superRefine((val, ctx) => {
+	if (!URL.canParse(val)) {
+		ctx.addIssue({
+			code: z$1.ZodIssueCode.custom,
+			message: "URL must be parseable",
+			fatal: true
+		});
+		return z$1.NEVER;
+	}
+}).refine((url) => {
+	const u = new URL(url);
+	return u.protocol !== "javascript:" && u.protocol !== "data:" && u.protocol !== "vbscript:";
+}, { message: "URL cannot use javascript:, data:, or vbscript: scheme" });
+/**
+* RFC 9728 OAuth Protected Resource Metadata
+*/
+const OAuthProtectedResourceMetadataSchema = z$1.looseObject({
+	resource: z$1.string().url(),
+	authorization_servers: z$1.array(SafeUrlSchema).optional(),
+	jwks_uri: z$1.string().url().optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	bearer_methods_supported: z$1.array(z$1.string()).optional(),
+	resource_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	resource_name: z$1.string().optional(),
+	resource_documentation: z$1.string().optional(),
+	resource_policy_uri: z$1.string().url().optional(),
+	resource_tos_uri: z$1.string().url().optional(),
+	tls_client_certificate_bound_access_tokens: z$1.boolean().optional(),
+	authorization_details_types_supported: z$1.array(z$1.string()).optional(),
+	dpop_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	dpop_bound_access_tokens_required: z$1.boolean().optional()
+});
+/**
+* RFC 8414 OAuth 2.0 Authorization Server Metadata
+*/
+const OAuthMetadataSchema = z$1.looseObject({
+	issuer: z$1.string(),
+	authorization_endpoint: SafeUrlSchema,
+	token_endpoint: SafeUrlSchema,
+	registration_endpoint: SafeUrlSchema.optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	response_types_supported: z$1.array(z$1.string()),
+	response_modes_supported: z$1.array(z$1.string()).optional(),
+	grant_types_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	service_documentation: SafeUrlSchema.optional(),
+	revocation_endpoint: SafeUrlSchema.optional(),
+	revocation_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	revocation_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	introspection_endpoint: z$1.string().optional(),
+	introspection_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	introspection_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	code_challenge_methods_supported: z$1.array(z$1.string()).optional(),
+	client_id_metadata_document_supported: z$1.boolean().optional()
+});
+/**
+* OpenID Connect Discovery 1.0 Provider Metadata
+* see: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
+*/
+const OpenIdProviderMetadataSchema = z$1.looseObject({
+	issuer: z$1.string(),
+	authorization_endpoint: SafeUrlSchema,
+	token_endpoint: SafeUrlSchema,
+	userinfo_endpoint: SafeUrlSchema.optional(),
+	jwks_uri: SafeUrlSchema,
+	registration_endpoint: SafeUrlSchema.optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	response_types_supported: z$1.array(z$1.string()),
+	response_modes_supported: z$1.array(z$1.string()).optional(),
+	grant_types_supported: z$1.array(z$1.string()).optional(),
+	acr_values_supported: z$1.array(z$1.string()).optional(),
+	subject_types_supported: z$1.array(z$1.string()),
+	id_token_signing_alg_values_supported: z$1.array(z$1.string()),
+	id_token_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	id_token_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	display_values_supported: z$1.array(z$1.string()).optional(),
+	claim_types_supported: z$1.array(z$1.string()).optional(),
+	claims_supported: z$1.array(z$1.string()).optional(),
+	service_documentation: z$1.string().optional(),
+	claims_locales_supported: z$1.array(z$1.string()).optional(),
+	ui_locales_supported: z$1.array(z$1.string()).optional(),
+	claims_parameter_supported: z$1.boolean().optional(),
+	request_parameter_supported: z$1.boolean().optional(),
+	request_uri_parameter_supported: z$1.boolean().optional(),
+	require_request_uri_registration: z$1.boolean().optional(),
+	op_policy_uri: SafeUrlSchema.optional(),
+	op_tos_uri: SafeUrlSchema.optional(),
+	client_id_metadata_document_supported: z$1.boolean().optional()
+});
+/**
+* OpenID Connect Discovery metadata that may include OAuth 2.0 fields
+* This schema represents the real-world scenario where OIDC providers
+* return a mix of OpenID Connect and OAuth 2.0 metadata fields
+*/
+const OpenIdProviderDiscoveryMetadataSchema = z$1.object({
+	...OpenIdProviderMetadataSchema.shape,
+	...OAuthMetadataSchema.pick({ code_challenge_methods_supported: true }).shape
+});
+z$1.object({
+	access_token: z$1.string(),
+	id_token: z$1.string().optional(),
+	token_type: z$1.string(),
+	expires_in: z$1.coerce.number().optional(),
+	scope: z$1.string().optional(),
+	refresh_token: z$1.string().optional()
+}).strip();
+z$1.object({
+	error: z$1.string(),
+	error_description: z$1.string().optional(),
+	error_uri: z$1.string().optional()
+});
+/**
+* Optional version of SafeUrlSchema that allows empty string for retrocompatibility on tos_uri and logo_uri
+*/
+const OptionalSafeUrlSchema = SafeUrlSchema.optional().or(z$1.literal("").transform(() => void 0));
+/**
+* RFC 7591 OAuth 2.0 Dynamic Client Registration metadata
+*/
+const OAuthClientMetadataSchema = z$1.object({
+	redirect_uris: z$1.array(SafeUrlSchema),
+	token_endpoint_auth_method: z$1.string().optional(),
+	grant_types: z$1.array(z$1.string()).optional(),
+	response_types: z$1.array(z$1.string()).optional(),
+	client_name: z$1.string().optional(),
+	client_uri: SafeUrlSchema.optional(),
+	logo_uri: OptionalSafeUrlSchema,
+	scope: z$1.string().optional(),
+	contacts: z$1.array(z$1.string()).optional(),
+	tos_uri: OptionalSafeUrlSchema,
+	policy_uri: z$1.string().optional(),
+	jwks_uri: SafeUrlSchema.optional(),
+	jwks: z$1.any().optional(),
+	software_id: z$1.string().optional(),
+	software_version: z$1.string().optional(),
+	software_statement: z$1.string().optional()
+}).strip();
+/**
+* RFC 7591 OAuth 2.0 Dynamic Client Registration client information
+*/
+const OAuthClientInformationSchema = z$1.object({
+	client_id: z$1.string(),
+	client_secret: z$1.string().optional(),
+	client_id_issued_at: z$1.number().optional(),
+	client_secret_expires_at: z$1.number().optional()
+}).strip();
+OAuthClientMetadataSchema.merge(OAuthClientInformationSchema);
+z$1.object({
+	error: z$1.string(),
+	error_description: z$1.string().optional()
+}).strip();
+z$1.object({
+	token: z$1.string(),
+	token_type_hint: z$1.string().optional()
+}).strip();
 const platformSchema = z.enum(["chatgpt", "claudeai"]);
 const PLATFORM_LABELS = {
 	chatgpt: "ChatGPT",
@@ -71,7 +239,14 @@ const auditReportWithScreenshotsSchema = auditReportSchema.extend({ widgetScreen
 	chatgpt: widgetScreenshotSchema.optional(),
 	claudeai: widgetScreenshotSchema.optional()
 }) });
-z.enum([
+z.object({
+	id: z.string(),
+	environmentId: z.string(),
+	clientId: z.string(),
+	clientSecret: z.string(),
+	clientScopes: z.array(z.string())
+});
+const deploymentStatusSchema$1 = z.enum([
 	"ongoing",
 	"deployed",
 	"failed",
@@ -81,6 +256,119 @@ z.object({
 	timestamp: z.coerce.date().optional(),
 	content: z.string().optional()
 });
+const deploymentSummarySchema = z.object({
+	id: z.string(),
+	status: deploymentStatusSchema$1,
+	sourceBucket: z.string().nullable(),
+	sourceObjectKey: z.string().nullable(),
+	sourceRef: z.string().nullable(),
+	sourceCommitId: z.string().nullable(),
+	sourceCommitMessage: z.string().nullable(),
+	environmentId: z.string(),
+	authorUsername: z.string().nullable(),
+	authorAvatarUrl: z.string().nullable(),
+	startedAt: z.coerce.date().nullable(),
+	completedAt: z.coerce.date().nullable(),
+	isCurrent: z.boolean().optional(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+/**
+* Public environment
+*
+* No OAuth metadata exposed.
+*/
+const publicEnvironmentSchema = z.object({
+	isPublic: z.literal(true),
+	oAuthMetadata: z.undefined().optional()
+});
+/**
+* Protected environment with an external resource metadata URL
+*
+* An external resource metadata URL is returned in the WWW-Authenticate header during the first 401 response.
+* Everything that follows is handled outside of the MCP server scope.
+*/
+const externalResourceMetadataEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
+	scope: z.string().optional()
+});
+/**
+* Protected environment with an external authorization server URL
+*
+* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
+* An external authorization server URL is returned when requesting the endpoint.
+* Everything that follows is handled outside of the MCP server scope.
+*/
+const externalAuthorizationServerEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({
+		externalAuthorizationServerUrl: z.url(),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+/**
+* Standalone protected environment
+*
+* The server itself exposes the /.well-known/oauth-protected-resource endpoint.
+* The server itself exposes the /.well-known/oauth-authorization-server endpoint.
+*/
+const standaloneEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({
+		authorizationServerMetadata: z.union([OAuthMetadataSchema, OpenIdProviderDiscoveryMetadataSchema]),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+/**
+* Protected environment without OAuth discovery
+*
+* The server enforces authentication but exposes no OAuth discovery metadata.
+* Neither /.well-known/oauth-protected-resource nor /.well-known/oauth-authorization-server
+* are advertised. Clients must obtain credentials out-of-band.
+*/
+const protectedWithoutDiscoveryEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.strictObject({}),
+	scope: z.string().optional()
+});
+z.union([
+	publicEnvironmentSchema,
+	externalResourceMetadataEnvironmentSchema,
+	externalAuthorizationServerEnvironmentSchema,
+	standaloneEnvironmentSchema,
+	protectedWithoutDiscoveryEnvironmentSchema
+]);
+const allowedPlatformSchema = platformSchema;
+const environmentDomainSchema = z.object({
+	domain: z.string(),
+	status: z.enum([
+		"ongoing",
+		"deployed",
+		"failed"
+	]),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const environmentSchema$1 = z.object({
+	id: z.string(),
+	name: z.string(),
+	sourceBranch: z.string().nullable(),
+	mcpServerUrl: z.string(),
+	activeDeployment: deploymentSummarySchema.optional(),
+	latestDeployment: deploymentSummarySchema.optional(),
+	openaiAppsChallenge: z.string().nullable().optional(),
+	isPlaygroundEnabled: z.boolean(),
+	isIpWhitelistEnabled: z.boolean(),
+	ipAllowlist: z.array(z.string()).nullable(),
+	allowedPlatforms: z.array(allowedPlatformSchema),
+	projectId: z.string(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const environmentWithDomainsSchema = environmentSchema$1.extend({ domains: z.array(environmentDomainSchema) });
 z.object({
 	id: z.string(),
 	createdAt: z.coerce.date(),
@@ -92,6 +380,86 @@ z.object({
 	content: z.string(),
 	source: z.enum(["model", "user"])
 });
+const intentCategoryColorSchema = z.enum([
+	"red",
+	"orange",
+	"yellow",
+	"green",
+	"blue",
+	"purple",
+	"pink",
+	"gray"
+]);
+intentCategoryColorSchema.options;
+const intentCategorySchema = z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema
+});
+z.object({
+	id: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema,
+	intentCount: z.number().int().nonnegative()
+});
+z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	toolName: z.string(),
+	message: z.string(),
+	categories: z.array(intentCategorySchema)
+});
+const signalCategorySchema = z.object({
+	id: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema
+});
+z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("new"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		currentShare: z.number()
+	}),
+	z.object({
+		kind: z.literal("resurging"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		daysQuiet: z.number(),
+		currentShare: z.number()
+	}),
+	z.object({
+		kind: z.literal("spike"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		previousCount: z.number().int().nonnegative(),
+		currentShare: z.number(),
+		previousShare: z.number(),
+		changeRatio: z.number()
+	}),
+	z.object({
+		kind: z.literal("declining"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		previousCount: z.number().int().nonnegative(),
+		currentShare: z.number(),
+		previousShare: z.number(),
+		changeRatio: z.number()
+	})
+]);
+z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("existing"),
+	categoryId: z.string(),
+	categoryName: z.string(),
+	intentIds: z.array(z.string())
+}), z.object({
+	kind: z.literal("new"),
+	categoryName: z.string(),
+	intentIds: z.array(z.string())
+})]);
 z.object({
 	id: z.string(),
 	teamId: z.string(),
@@ -117,6 +485,60 @@ const transportSchema = z.enum([
 	"sse",
 	"streamablehttp"
 ]);
+z.object({
+	id: z.string(),
+	name: z.string(),
+	teamId: z.string(),
+	sourceRepository: z.string().nullable(),
+	createdAt: z.coerce.date().optional(),
+	runtime: runtimeSchema,
+	transport: transportSchema.nullable(),
+	rootDirectory: z.string().nullable(),
+	installCommand: z.string().nullable(),
+	buildCommand: z.string().nullable(),
+	buildOutputDir: z.string().nullable(),
+	startCommand: z.string().nullable(),
+	fixedOutboundIp: z.boolean(),
+	environments: z.array(environmentWithDomainsSchema),
+	productionEnvironment: environmentWithDomainsSchema.nullable()
+});
+z.object({
+	domain: z.string(),
+	createdAt: z.coerce.date(),
+	status: z.enum([
+		"ongoing",
+		"deployed",
+		"failed"
+	]),
+	environment: environmentSchema$1
+});
+const serverFieldsSchema$1 = z.object({
+	$schema: z.string(),
+	name: z.string(),
+	description: z.string(),
+	version: z.string().optional(),
+	title: z.string().optional(),
+	websiteUrl: z.string().optional(),
+	icons: z.array(z.object({
+		src: z.string(),
+		mimeType: z.string().optional(),
+		sizes: z.array(z.string()).optional()
+	})).optional(),
+	remotes: z.array(z.object({
+		type: z.string(),
+		url: z.string().optional(),
+		headers: z.array(z.object({
+			name: z.string(),
+			description: z.string(),
+			isRequired: z.boolean().optional(),
+			isSecret: z.boolean().optional()
+		})).optional()
+	})).optional()
+}).catchall(z.unknown());
+z.object({
+	serverFields: serverFieldsSchema$1,
+	source: z.enum(["registry", "defaults"])
+});
 const toolDefinitionSchema = z.object({
 	name: z.string(),
 	title: z.string().optional().describe("Human-friendly name for the tool, used in the UI. If not provided, `name` will be used."),
@@ -134,6 +556,10 @@ const positiveTestCaseSchema = z.object({
 	toolTriggered: z.string().optional(),
 	expectedOutput: z.string().optional()
 }).partial().describe("Each case: Scenario, User prompt, Tool triggered, Expected output.");
+const screenshotEntrySchema = z.object({
+	prompt: z.string(),
+	url: z.url()
+}).describe("Each screenshot: the user prompt that produced it + the image URL.");
 /** Accepts either a valid email or URL. */
 const supportChannelSchema = z.string().refine((value) => z.email().safeParse(value).success || z.url().safeParse(value).success, { error: "Must be a valid email or URL" });
 const chatgptCategorySchema = z.enum([
@@ -174,7 +600,7 @@ const chatgptTranslationSchema = z.object({
 */
 const chatgptSubmissionFormDataSchema = z.object({
 	logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
-	logoDark: z.string().describe("Logo icon for dark mode. Square PNG. Same specs as the light icon."),
+	logoDark: z.string().optional().describe("Optional dark-mode logo icon. Square PNG, same specs as the light icon. Leave empty if the light icon also works on dark backgrounds."),
 	appName: z.string().describe("The name users will see in ChatGPT and in the Apps Directory."),
 	tagline: z.string().max(30).describe("Plain-language phrase focused on function and user value. 30 chars max."),
 	description: z.string().describe("Clear, engaging description highlighting what the app does and why people will love it. Appears publicly on the directory page."),
@@ -192,7 +618,7 @@ const chatgptSubmissionFormDataSchema = z.object({
 	toolJustifications: z.array(chatgptToolJustificationSchema).describe("Per-tool justification of `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotation values."),
 	testCases: z.array(positiveTestCaseSchema).describe("At least 5 positive test cases. Each: Scenario, User prompt, Tool triggered, Expected output. Coverage over all major use cases."),
 	negativeTestCases: z.array(negativeTestCaseSchema).describe("3 negative test cases — prompts where the app should NOT trigger but the model might think it's relevant."),
-	screenshots: z.array(z.url()).describe("URLs of in-app screenshots. Widget apps must show the widget UI; non-widget apps show the model response. Min 1, max 4. First three are public."),
+	screenshots: z.array(screenshotEntrySchema).describe("In-app screenshots paired with the user prompt that produced them. Widget apps must show the widget UI; non-widget apps show the model response. Min 1, max 4 entries. First three are public. Images: 706px wide, 400–860px tall, PNG."),
 	translations: z.array(chatgptTranslationSchema).describe("Per-locale translation of tagline + description. English (US) is the default."),
 	allowedCountries: chatgptAllowedCountriesSchema.describe("'Allow all' or restrict to a specific list. See OpenAI's supported countries list."),
 	releaseNotes: z.string().describe("Publicly displayed on the app details page.")
@@ -372,19 +798,20 @@ Reviewers test every single tool you list here — don't list tools that don't w
 • 'I've specified user-friendly titles for all tools' — every tool has a 'title' annotation (a human-readable label, different from the tool name).
 • 'I've specified accurate tool annotations for all tools' — every tool has the correct annotation: readOnlyHint: true for read operations (search, get, list, fetch), OR destructiveHint: true for write operations (create, update, delete, send).
 This is the #1 reason submissions get rejected (30% of all rejections). Do not check these boxes without actually having implemented the annotations. See MCP spec for how to add them.`),
-	logoLight: z.string().describe(`Your connector's logo as displayed in the directory. Requirements:
+	logoLight: z.string().describe(`Your connector's logo for light backgrounds. Requirements:
 • Format: SVG only
 • Aspect ratio: square (1:1)
-• Should work on both light and dark backgrounds (or you can provide separate light/dark versions)
+• Should work on a light background
 • Provide via URL (Google Drive link is fine) or upload directly
 Tip: use a simple, recognizable icon — not a full wordmark. The logo appears at small sizes in the directory grid.`),
-	screenshots: z.array(z.url()).describe(`Screenshots or promotional images of your connector in action within Claude. Strongly recommended for all connectors, and required for MCP Apps (interactive UI). Guidelines:
+	logoDark: z.string().optional().describe(`Optional dark-mode variant of the connector logo. Same specs as the light variant (SVG, square 1:1) but designed to read on a dark background. Leave empty if the light logo already works on dark.`),
+	screenshots: z.array(screenshotEntrySchema).describe(`Screenshots or promotional images of your connector in action within Claude. Strongly recommended for all connectors, and required for MCP Apps (interactive UI). Guidelines:
 • 3–5 images is ideal
 • Minimum 1000px width, PNG format preferred
+• Each screenshot is paired with the user prompt that produced it
 • Crop to just the relevant part of the Claude interface (the tool response area)
 • Show your connector doing something impressive and useful — real data, real results
 • If you're an MCP App, include screenshots of your interactive UI elements
-• Videos are also welcome
 These images appear in your directory listing and are a key factor in driving user installs.`)
 });
 claudeSubmissionFormDataSchema.pick({
@@ -427,6 +854,22 @@ const subscriptionPlanSchema = z.enum([
 	"enterprise"
 ]);
 z.object({ plan: subscriptionPlanSchema.nullable() });
+const customerCreditsSchema = z.object({
+	balanceInCents: z.number(),
+	expiresAt: z.number().nullable(),
+	currency: z.string()
+});
+const customerUsageSchema = z.object({
+	amountInCents: z.number(),
+	currency: z.string(),
+	periodEnd: z.number()
+});
+const partnerDiscountSchema = z.object({ endsAt: z.number() });
+z.object({
+	customerCredits: customerCreditsSchema.nullable(),
+	customerUsage: customerUsageSchema.nullable(),
+	partnerDiscount: partnerDiscountSchema.nullable()
+});
 //#endregion
 //#region src/schemas.ts
 const RESERVED_KEYS = [
@@ -583,7 +1026,7 @@ const getEnvironmentContractV1 = oc.route({
 	name: z.string(),
 	sourceBranch: z.string().nullable(),
 	mcpServerUrl: z.string(),
-	domains: z.array(z.url()),
+	domains: z.array(z.hostname()),
 	createdAt: z.coerce.date(),
 	projectId: z.string()
 }));
@@ -1032,7 +1475,7 @@ const upsertPlaygroundContractV1 = oc.route({
 	name: z.string().min(1).max(100).optional(),
 	description: z.string().min(1).max(500).optional(),
 	headers: z.array(playgroundHeaderSchema).optional(),
-	examplePrompts: z.array(playgroundExamplePromptSchema).max(3).optional()
+	examplePrompts: z.array(playgroundExamplePromptSchema).max(5).optional()
 })).output(playgroundOutputSchema);
 const createBeaconContractV1 = oc.route({
 	path: "/v1/beacon/audits",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpic-ai/api",
-  "version": "0.0.0-dev.gff0a01e",
+  "version": "0.0.0-dev.gff1b65e",
   "description": "Contract for the Alpic API",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -14,15 +14,6 @@
   "files": [
     "dist"
   ],
-  "nx": {
-    "targets": {
-      "build": {
-        "dependsOn": [
-          "^build"
-        ]
-      }
-    }
-  },
   "author": "Alpic",
   "license": "ISC",
   "dependencies": {