@alpic-ai/api 0.0.0-staging.fb9e558 → 0.0.0-staging.fc7750c

package/dist/index.mjs

@@ -1,6 +1,278 @@
-import { oc } from "@orpc/contract";
 import { z } from "zod";
+import { oc } from "@orpc/contract";
+import ms from "ms";
+const platformSchema = z.enum(["chatgpt", "claudeai"]);
+const PLATFORM_LABELS = {
+	chatgpt: "ChatGPT",
+	claudeai: "Claude.ai"
+};
+const auditStatusSchema = z.enum([
+	"pending",
+	"partial",
+	"completed",
+	"failed"
+]);
+const checkSeveritySchema = z.enum([
+	"error",
+	"warning",
+	"info"
+]);
+const checkCategorySchema = z.enum([
+	"connectivity",
+	"tool-metadata",
+	"resource-metadata",
+	"performance",
+	"e2e"
+]);
+const checkScopeSchema = z.enum(["server", "view"]);
+const checkDetailSchema = z.object({
+	label: z.string(),
+	value: z.string().optional()
+});
+const checkResultSchema = z.object({
+	checkId: z.string(),
+	checkName: z.string(),
+	description: z.string(),
+	status: z.enum([
+		"pass",
+		"fail",
+		"skip",
+		"pending"
+	]),
+	message: z.string(),
+	skipReason: z.string().optional(),
+	severity: checkSeveritySchema,
+	category: checkCategorySchema,
+	scope: checkScopeSchema,
+	platforms: z.array(platformSchema).readonly().optional(),
+	durationMs: z.number(),
+	details: z.array(checkDetailSchema).optional(),
+	hint: z.object({ text: z.string() }).optional()
+});
+const auditReportSchema = z.object({
+	schemaVersion: z.string(),
+	auditId: z.string(),
+	targetUrl: z.string(),
+	startedAt: z.string(),
+	completedAt: z.string(),
+	durationMs: z.number(),
+	results: z.array(checkResultSchema),
+	requiresAuth: z.boolean(),
+	hasViewSupport: z.boolean(),
+	viewPlatforms: z.array(platformSchema).readonly().optional(),
+	isReadyForPlatform: z.record(platformSchema, z.boolean()),
+	widgetScreenshotKeys: z.object({
+		chatgpt: z.string().optional(),
+		claudeai: z.string().optional()
+	})
+});
+const widgetScreenshotSchema = z.object({ url: z.string() });
+const auditReportWithScreenshotsSchema = auditReportSchema.extend({ widgetScreenshots: z.object({
+	chatgpt: widgetScreenshotSchema.optional(),
+	claudeai: widgetScreenshotSchema.optional()
+}) });
+z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	content: z.string(),
+	source: z.enum(["model", "user"])
+});
+z.object({
+	content: z.string(),
+	source: z.enum(["model", "user"])
+});
+const toolDefinitionSchema = z.object({
+	name: z.string(),
+	title: z.string().optional(),
+	description: z.string().optional(),
+	annotations: z.object({
+		readOnlyHint: z.boolean().optional(),
+		destructiveHint: z.boolean().optional(),
+		openWorldHint: z.boolean().optional(),
+		idempotentHint: z.boolean().optional()
+	}).optional()
+});
+const positiveTestCaseSchema = z.object({
+	scenario: z.string(),
+	userPrompt: z.string(),
+	toolTriggered: z.string().optional(),
+	expectedOutput: z.string().optional()
+}).partial().describe("Each case: Scenario, User prompt, Tool triggered, Expected output.");
+/** Accepts either a valid email or URL. */
+const supportChannelSchema = z.string().refine((value) => z.email().safeParse(value).success || z.url().safeParse(value).success, { error: "Must be a valid email or URL" });
+const chatgptCategorySchema = z.enum([
+	"BUSINESS",
+	"COLLABORATION",
+	"DESIGN",
+	"DEVELOPER_TOOLS",
+	"EDUCATION",
+	"ENTERTAINMENT",
+	"FINANCE",
+	"FOOD",
+	"LIFESTYLE",
+	"NEWS",
+	"PRODUCTIVITY",
+	"SHOPPING",
+	"TRAVEL"
+]);
+const chatgptAuthenticationSchema = z.enum(["No auth needed", "OAuth 2.0"]);
+const chatgptAllowedCountriesSchema = z.enum(["Allow all", "Restrict to specific countries"]);
+const negativeTestCaseSchema = z.object({
+	scenario: z.string(),
+	userPrompt: z.string()
+}).partial().describe("Each case: Scenario + User prompt (the app should NOT trigger).");
+const chatgptToolJustificationSchema = z.object({
+	toolName: z.string(),
+	readOnlyJustification: z.string(),
+	openWorldJustification: z.string(),
+	destructiveJustification: z.string()
+}).describe("Per-tool justification of each MCP annotation value (one sentence per hint).");
+const chatgptTranslationSchema = z.object({
+	locale: z.string(),
+	tagline: z.string().optional(),
+	description: z.string().optional()
+}).describe("Locale-scoped override for tagline + description. English (US) is the default.");
+/**
+* Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section.
+* When adding/removing/reordering fields, keep this in sync with the sheet.
+*/
+const chatgptSubmissionFormDataSchema = z.object({
+	logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
+	logoDark: z.string().describe("Logo icon for dark mode. Square PNG. Same specs as the light icon."),
+	appName: z.string().describe("The name users will see in ChatGPT and in the Apps Directory."),
+	tagline: z.string().max(30).describe("Plain-language phrase focused on function and user value. 30 chars max."),
+	description: z.string().describe("Clear, engaging description highlighting what the app does and why people will love it. Appears publicly on the directory page."),
+	category: chatgptCategorySchema.describe("Category from the OpenAI taxonomy."),
+	developerName: z.string().describe("Developer name shown publicly on the app's directory page."),
+	companyUrl: z.url().describe("Your company's main website URL."),
+	supportChannel: supportChannelSchema.describe("Customer support URL or email address."),
+	privacyPolicyUrl: z.url().describe("URL to your privacy policy."),
+	termsOfServiceUrl: z.url().describe("URL to the app's terms of service."),
+	demoRecordingUrl: z.url().describe("URL to a video demonstrating the app, recorded via OpenAI Developer Mode. Cover all main use cases on web, iOS, and Android."),
+	appCommerceAndPurchasing: z.boolean().describe("Checkbox: 'My app links or directs users out of ChatGPT to make purchases.' Defaults to false. Verify the app does not offer digital goods."),
+	serverUrl: z.url().describe("URL of the MCP server."),
+	authentication: chatgptAuthenticationSchema.describe("OAuth 2.0 or No auth. OAuth configuration is auto-discovered from the MCP server's metadata."),
+	tools: z.array(toolDefinitionSchema).describe("List of tools exposed by the MCP server (auto-populated from the production server's manifest)."),
+	toolJustifications: z.array(chatgptToolJustificationSchema).describe("Per-tool justification of `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotation values."),
+	testCases: z.array(positiveTestCaseSchema).describe("At least 5 positive test cases. Each: Scenario, User prompt, Tool triggered, Expected output. Coverage over all major use cases."),
+	negativeTestCases: z.array(negativeTestCaseSchema).describe("3 negative test cases — prompts where the app should NOT trigger but the model might think it's relevant."),
+	screenshots: z.array(z.url()).describe("URLs of in-app screenshots. Widget apps must show the widget UI; non-widget apps show the model response. Min 1, max 4. First three are public."),
+	translations: z.array(chatgptTranslationSchema).describe("Per-locale translation of tagline + description. English (US) is the default."),
+	allowedCountries: chatgptAllowedCountriesSchema.describe("'Allow all' or restrict to a specific list. See OpenAI's supported countries list."),
+	releaseNotes: z.string().describe("Publicly displayed on the app details page.")
+});
+const claudeCategorySchema = z.enum([
+	"Business & Productivity",
+	"Communication",
+	"Data & Analytics",
+	"Development tools",
+	"Financial Services",
+	"Consumer Health",
+	"Health & Life Sciences",
+	"Media & Entertainment",
+	"Commerce & Shopping"
+]);
+z.enum([
+	"No auth needed",
+	"OAuth 2.0",
+	"Custom URL"
+]);
+const claudeMcpUrlTypeSchema = z.enum(["Universal URL", "Custom MCP URLs"]);
+z.enum(["Static OAuth Client", "Dynamic OAuth Client (DCR / CIMD)"]);
+const claudeReadWriteCapabilitiesSchema = z.enum([
+	"Read only",
+	"Write only",
+	"Read + write"
+]);
+const claudeTransportSchema = z.enum(["Streamable HTTP", "SSE"]);
+const claudeThirdPartySchema = z.enum([
+	"Web access (open web fetch / scraping / arbitrary URLs)",
+	"Third-party AI model integration",
+	"Third-party data retrieval (via workflow / aggregator)",
+	"Third-party data modification (via workflow / aggregator)",
+	"N/A"
+]);
+const claudeDataHandlingSchema = z.enum([
+	"Server only accesses data explicitly requested by user",
+	"No data is stored beyond session requirements",
+	"Data transmission is encrypted (HTTPS / TLS)",
+	"GDPR compliant (if applicable)"
+]);
+const claudeSponsoredContentSchema = z.enum([
+	"No, there is no sponsored content or advertisements",
+	"Yes, there are banner ads or other paid visual elements",
+	"Yes, returned content or ranking is impacted by sponsorship or ad placement"
+]);
+/**
+* Field order mirrors the Claude (Anthropic) submission spreadsheet, grouped by section.
+* When adding/removing/reordering fields, keep this in sync with the sheet.
+*/
+const claudeSubmissionFormDataSchema = z.object({
+	companyName: z.string().describe("Enter your company's legal name or the name under which your product is publicly known. This is used for internal tracking and may appear in directory listings."),
+	companyUrl: z.url().describe("Your company's main website URL, e.g. https://mycompany.com. Must be a valid URL with https://. This should be the root domain of the company behind this MCP server."),
+	primaryContactName: z.string().describe("Full name of the person Anthropic should contact about this submission. This person will receive review feedback, approval notices, and any follow-up questions."),
+	primaryContactEmail: z.email().describe("Business email for the primary contact. Must be a valid email address. Anthropic uses this to communicate about your submission status, required changes, and post-listing issues. Avoid using personal email addresses."),
+	primaryContactRole: z.string().optional().describe("The job title or role of the primary contact (e.g. 'CTO', 'Developer Relations Lead', 'Founder'). Optional but helps Anthropic route questions to the right person."),
+	anthropicPointOfContact: z.string().optional().describe("If you have a direct contact at Anthropic (e.g. from a partnership or sales conversation), enter their name here. This is optional but can greatly help expedite the review process. Leave blank if you don't have one."),
+	appName: z.string().describe(`The public display name for your connector as it will appear in the Connectors Directory.
+
+Rules:
+(1) Do NOT include the words 'MCP' or 'Server' — these are auto-rejected.
+(2) Use your brand/product name, e.g. 'Notion', 'Linear', 'Slack'.
+(3) You must own or have the right to use this brand name. For example, don't call it 'Google Drive Helper' if you're not Google.`),
+	mcpUrlType: claudeMcpUrlTypeSchema.describe("Universal URL = one URL serves all users. Custom MCP URLs = signup URL + regex matching per-user URLs."),
+	serverUrl: z.url().describe("Production MCP server URL (https). Derived from the project's production environment by default."),
+	tagline: z.string().max(55).describe("Short blurb shown below the server name. 55 chars max."),
+	description: z.string().describe("50–100 words describing what the server does and its key capabilities. Lives on the directory listing."),
+	testCases: z.array(positiveTestCaseSchema).describe("At least 3 use cases with example prompts showing the value of the connector."),
+	connectionRequirements: z.string().describe(`Prerequisites before connecting:
+• Free/premium account
+• Admin seat
+• Geographic availability
+• Custom instance URL
 
+State 'No special requirements.' if none.`),
+	readWriteCapabilities: claudeReadWriteCapabilitiesSchema.describe("Inferred from the `readOnlyHint` annotations on the MCP tools."),
+	isMcpApp: z.boolean().describe("True if the server exposes interactive UI elements (widgets). Inferred from the MCP connection."),
+	thirdPartyConnectionsAndWebAccess: z.array(claudeThirdPartySchema).describe("Multi-select of what the server reaches out to (web, third-party AI, data aggregators)."),
+	dataHandling: z.array(claudeDataHandlingSchema).describe("Multi-select of data-handling practices that accurately describe the server. Cannot be inferred — user must self-declare."),
+	personalDataHealthAccess: z.boolean().describe("True only if the connector gives users access to their own personal health data (medical records, lab results, health metrics)."),
+	categories: z.array(claudeCategorySchema).describe("Multi-select of categories that best describe the server in the directory."),
+	sponsoredContentsOrAdvertisement: claudeSponsoredContentSchema.describe("Disclose paid promotion or sponsored content. Cannot be filled by Alpic — user must self-declare."),
+	transportSupport: z.array(claudeTransportSchema).describe("Multi-select of transport protocols the server supports. Anthropic recommends Streamable HTTP (SSE may be deprecated later this year)."),
+	serverDocumentationLink: z.url().describe("Public docs URL covering what the MCP does, setup, debugging, and self-serve support. The Alpic playground may be used."),
+	privacyPolicyUrl: z.url().describe("URL to your privacy policy. Mandatory and displayed alongside the directory listing."),
+	supportChannel: supportChannelSchema.describe("Link or email for user support (help center, GitHub issues, docs, support@…). Displayed alongside the directory listing."),
+	testingCredentials: z.string().describe("Credentials for reviewers to verify functionality. Required if the server uses OAuth. No 2FA. Use mcp-review@anthropic.com if an accessible email is needed."),
+	tools: z.array(toolDefinitionSchema).describe("List of tools exposed by the MCP server (auto-populated from the production server's manifest)."),
+	toolTitlesAnnotationsConfirmed: z.boolean().describe("Confirmation that all tools have user-friendly titles and accurate annotations (readOnlyHint, destructiveHint, …)."),
+	logoLight: z.string().describe("Server/app logo for light mode. Square 1:1 aspect ratio. SVG preferred for Claude."),
+	screenshots: z.array(z.url()).describe("URLs of screenshots of the connector on Claude.ai or promo material. 3–5 ideal. ≥1000px width preferred, PNG, cropped to the app response. Videos welcome.")
+});
+const submissionMetaFieldsSchema = z.object({
+	id: z.string(),
+	environmentId: z.string(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const claudeSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
+	platform: z.literal("claudeai"),
+	formData: claudeSubmissionFormDataSchema.partial()
+});
+const chatgptSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
+	platform: z.literal("chatgpt"),
+	formData: chatgptSubmissionFormDataSchema.partial()
+});
+z.discriminatedUnion("platform", [claudeSubmissionSchemaInternal, chatgptSubmissionSchemaInternal]);
+z.union([claudeSubmissionFormDataSchema.partial(), chatgptSubmissionFormDataSchema.partial()]);
+const subscriptionPlanSchema = z.enum([
+	"pro",
+	"business",
+	"enterprise"
+]);
+z.object({ plan: subscriptionPlanSchema.nullable() });
+//#endregion
 //#region src/schemas.ts
 const RESERVED_KEYS = [
 	"_HANDLER",
@@ -13,7 +285,11 @@ const RESERVED_KEYS = [
 	"AWS_LAMBDA_FUNCTION_VERSION",
 	"AWS_LAMBDA_INITIALIZATION_TYPE",
 	"AWS_LAMBDA_LOG_GROUP_NAME",
+	"AWS_LAMBDA_LOG_STREAM_NAME",
 	"AWS_ACCESS_KEY",
+	"AWS_ACCESS_KEY_ID",
+	"AWS_SECRET_ACCESS_KEY",
+	"AWS_SESSION_TOKEN",
 	"AWS_LAMBDA_RUNTIME_API",
 	"LAMBDA_TASK_ROOT",
 	"LAMBDA_RUNTIME_DIR",
@@ -30,7 +306,9 @@ const RESERVED_KEYS = [
 	"BUILD_ARG_BUILD_COMMAND",
 	"BUILD_ARG_BUILD_OUTPUT_DIR",
 	"BUILD_ARG_START_COMMAND",
-	"ALPIC_HOST"
+	"ALPIC_HOST",
+	"ALPIC_CUSTOM_DOMAINS",
+	"ALPIC_INTENT_META_KEY"
 ];
 const environmentVariableSchema = z.object({
 	key: z.string().min(2, "Key must be at least 2 characters").regex(/^[a-zA-Z]([a-zA-Z0-9_])+$/, "Key must start with a letter and contain only letters, numbers, and underscores").refine((key) => !RESERVED_KEYS.includes(key), "This key is reserved and cannot be used as an environment variable key"),
@@ -38,6 +316,10 @@ const environmentVariableSchema = z.object({
 	isSecret: z.boolean().default(false)
 });
 const environmentVariablesSchema = z.array(environmentVariableSchema);
+const updateEnvironmentVariableSchema = environmentVariableSchema.partial({
+	value: true,
+	isSecret: true
+});
 const buildSettingsSchema = z.object({
 	installCommand: z.string().optional(),
 	buildCommand: z.string().optional(),
@@ -55,7 +337,39 @@ const transportSchema = z.enum([
 	"sse",
 	"streamablehttp"
 ]);
-
+const playgroundHeaderSchema = z.object({
+	name: z.string().min(1).max(100),
+	description: z.string().max(200),
+	isRequired: z.boolean().default(false),
+	isSecret: z.boolean().default(false)
+});
+const playgroundExamplePromptSchema = z.object({
+	title: z.string().min(1).max(100),
+	prompt: z.string().min(1).max(500)
+});
+const serverFieldsSchema = z.object({
+	$schema: z.string(),
+	name: z.string(),
+	description: z.string(),
+	version: z.string().optional(),
+	title: z.string().optional(),
+	websiteUrl: z.url().optional(),
+	icons: z.array(z.object({
+		src: z.url(),
+		mimeType: z.string().optional(),
+		sizes: z.array(z.string()).optional()
+	})).optional(),
+	remotes: z.array(z.object({
+		type: z.string(),
+		url: z.url().optional(),
+		headers: z.array(z.object({
+			name: z.string(),
+			description: z.string(),
+			isRequired: z.boolean().optional(),
+			isSecret: z.boolean().optional()
+		})).optional()
+	})).optional()
+});
 //#endregion
 //#region src/api.contract.ts
 const deploymentStatusSchema = z.enum([
@@ -80,9 +394,16 @@ const deploymentSchema = z.object({
 	authorUsername: z.string().nullable(),
 	authorAvatarUrl: z.string().nullable(),
 	startedAt: z.coerce.date().nullable(),
-	completedAt: z.coerce.date().nullable()
+	completedAt: z.coerce.date().nullable(),
+	environmentId: z.string(),
+	environmentName: z.string(),
+	isCurrent: z.boolean(),
+	deploymentPageUrl: z.url().nullable()
 });
-const deploymentWithPageUrlSchema = deploymentSchema.extend({ deploymentPageUrl: z.url().nullable() });
+const isValidLogTimeInput = (value) => {
+	if (ms(value) !== void 0) return true;
+	return !Number.isNaN(new Date(value).getTime());
+};
 const createEnvironmentContractV1 = oc.route({
 	path: "/v1/environments",
 	method: "POST",
@@ -122,10 +443,20 @@ const getEnvironmentContractV1 = oc.route({
 	createdAt: z.coerce.date(),
 	projectId: z.string()
 }));
+const domainSchema = z.object({
+	domain: z.string(),
+	status: z.enum([
+		"ongoing",
+		"deployed",
+		"failed"
+	]),
+	createdAt: z.coerce.date()
+});
 const productionEnvironmentSchema = z.object({
 	id: z.string(),
 	name: z.string(),
 	mcpServerUrl: z.string(),
+	domains: z.array(domainSchema),
 	latestDeployment: latestDeploymentSchema.nullable()
 });
 const environmentSchema = z.object({
@@ -168,7 +499,7 @@ const listProjectsContractV1 = oc.route({
 	description: "List all projects for a team",
 	tags: ["projects"],
 	successDescription: "The list of projects"
-}).output(z.array(projectOutputSchema));
+}).input(z.object({ teamId: z.string().optional() }).optional()).output(z.array(projectOutputSchema));
 const createProjectContractV1 = oc.route({
 	path: "/v1/projects",
 	method: "POST",
@@ -181,7 +512,7 @@ const createProjectContractV1 = oc.route({
 	BAD_REQUEST: {}
 }).input(z.object({
 	teamId: z.string().optional(),
-	name: z.string().min(1).max(100),
+	name: z.string().trim().min(1).max(100),
 	sourceRepository: z.string().optional(),
 	branchName: z.string().min(1).optional(),
 	runtime: runtimeSchema,
@@ -211,8 +542,61 @@ const createProjectContractV1 = oc.route({
 	startCommand: z.string().nullable(),
 	createdAt: z.coerce.date()
 }));
+const environmentVariableOutputSchema = z.object({
+	id: z.string(),
+	key: z.string(),
+	value: z.string(),
+	isSecret: z.boolean(),
+	createdAt: z.coerce.date()
+});
+const listEnvironmentVariablesContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/environment-variables",
+	method: "GET",
+	summary: "List environment variables",
+	description: "List all environment variables for an environment",
+	tags: ["environments"],
+	successDescription: "The list of environment variables"
+}).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.array(environmentVariableOutputSchema));
+const createEnvironmentVariablesContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/environment-variables",
+	method: "POST",
+	summary: "Add environment variables",
+	description: "Add one or more environment variables to an environment",
+	tags: ["environments"],
+	successDescription: "The environment variables have been added successfully"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	environmentVariables: environmentVariablesSchema
+})).output(z.object({ success: z.literal(true) }));
+const updateEnvironmentVariableContractV1 = oc.route({
+	path: "/v1/environment-variables/{environmentVariableId}",
+	method: "PATCH",
+	summary: "Update an environment variable",
+	description: "Update an environment variable by ID",
+	tags: ["environments"],
+	successDescription: "The environment variable has been updated successfully"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	environmentVariableId: z.string().describe("The ID of the environment variable"),
+	key: environmentVariableSchema.shape.key,
+	value: environmentVariableSchema.shape.value.optional(),
+	isSecret: environmentVariableSchema.shape.isSecret.optional()
+})).output(z.object({ success: z.literal(true) }));
+const deleteEnvironmentVariableContractV1 = oc.route({
+	path: "/v1/environment-variables/{environmentVariableId}",
+	method: "DELETE",
+	summary: "Delete an environment variable",
+	description: "Delete an environment variable by ID",
+	tags: ["environments"],
+	successDescription: "The environment variable has been deleted successfully"
+}).errors({ NOT_FOUND: {} }).input(z.object({ environmentVariableId: z.string().describe("The ID of the environment variable") })).output(z.object({ success: z.literal(true) }));
 const deleteProjectContractV1 = oc.route({
-	path: "/v1/projects/:projectId",
+	path: "/v1/projects/{projectId}",
 	method: "DELETE",
 	summary: "Delete a project",
 	description: "Delete a project and all its environments",
@@ -247,7 +631,7 @@ const deployEnvironmentContractV1 = oc.route({
 }).input(z.object({
 	environmentId: z.string().describe("The ID of the environment to deploy"),
 	token: z.string().describe("The token to identify the source archive").optional()
-})).output(deploymentWithPageUrlSchema);
+})).output(deploymentSchema);
 const uploadDeploymentArtifactContractV1 = oc.route({
 	path: "/v1/deployments/upload",
 	method: "POST",
@@ -256,21 +640,22 @@ const uploadDeploymentArtifactContractV1 = oc.route({
 	tags: ["deployments"],
 	successDescription: "The presigned upload URL has been generated successfully"
 }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.object({
-	uploadUrl: z.string().url().describe("Presigned S3 URL to upload the source archive with HTTP PUT"),
+	uploadUrl: z.url().describe("Presigned S3 URL to upload the source archive with HTTP PUT"),
 	token: z.string().describe("Token to identify the source archive"),
 	expiresAt: z.coerce.date().describe("Expiration date of the presigned URL")
 }));
-const listProjectDeploymentsContractV1 = oc.route({
+const listDeploymentsContractV1 = oc.route({
 	path: "/v1/projects/{projectId}/deployments",
 	method: "GET",
 	summary: "List project deployments",
 	description: "List all deployments for a project",
 	tags: ["deployments"],
 	successDescription: "The list of deployments"
-}).errors({ NOT_FOUND: {} }).input(z.object({ projectId: z.string().describe("The ID of the project") })).output(z.array(deploymentSchema.extend({
-	isCurrent: z.boolean(),
-	environmentId: z.string()
-})));
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	projectId: z.string().describe("The ID of the project"),
+	status: z.array(deploymentStatusSchema).optional().describe("Filter by one or more statuses"),
+	environmentId: z.string().optional().describe("Filter by environment ID")
+})).output(z.array(deploymentSchema));
 const getDeploymentContractV1 = oc.route({
 	path: "/v1/deployments/{deploymentId}",
 	method: "GET",
@@ -278,7 +663,83 @@ const getDeploymentContractV1 = oc.route({
 	description: "Get a deployment by ID",
 	tags: ["deployments"],
 	successDescription: "The deployment details"
-}).errors({ NOT_FOUND: {} }).input(z.object({ deploymentId: z.string().describe("The ID of the deployment") })).output(deploymentWithPageUrlSchema);
+}).errors({ NOT_FOUND: {} }).input(z.object({ deploymentId: z.string().describe("The ID of the deployment") })).output(deploymentSchema);
+const getLogsContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/logs",
+	method: "GET",
+	summary: "Get logs",
+	description: "Get logs for an environment",
+	tags: ["environments"],
+	successDescription: "The logs"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	since: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
+	until: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("End time — ISO 8601 or relative"),
+	limit: z.coerce.number().int().min(1).max(1e3).default(1e3).describe("Maximum number of log entries to return."),
+	level: z.array(z.enum([
+		"INFO",
+		"ERROR",
+		"WARNING",
+		"DEBUG"
+	])).optional().describe("Filter by log level"),
+	search: z.string().optional().describe("Filter pattern to search for in log content"),
+	nextToken: z.string().optional().describe("Pagination token from a previous response")
+})).output(z.object({
+	logs: z.array(z.object({
+		timestamp: z.coerce.date(),
+		type: z.enum([
+			"START",
+			"END",
+			"INFO",
+			"ERROR",
+			"WARNING",
+			"DEBUG"
+		]),
+		requestId: z.string(),
+		content: z.string().optional(),
+		method: z.string().optional(),
+		durationInMs: z.number().optional()
+	})),
+	nextToken: z.string().nullable()
+}));
+const getLatestLogsContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/latest-logs",
+	method: "GET",
+	summary: "Get latest logs",
+	description: "Get the N most recent logs for an environment",
+	tags: ["environments"],
+	successDescription: "The latest logs"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	limit: z.coerce.number().int().min(1).max(1e3).default(100).describe("Number of most recent log entries to return"),
+	level: z.array(z.enum([
+		"INFO",
+		"ERROR",
+		"WARNING",
+		"DEBUG"
+	])).optional().describe("Filter by log level"),
+	search: z.string().optional().describe("Filter pattern to search for in log content")
+})).output(z.object({ logs: z.array(z.object({
+	timestamp: z.coerce.date(),
+	type: z.enum([
+		"START",
+		"END",
+		"INFO",
+		"ERROR",
+		"WARNING",
+		"DEBUG"
+	]),
+	requestId: z.string(),
+	content: z.string().optional(),
+	method: z.string().optional(),
+	durationInMs: z.number().optional()
+})) }));
 const getDeploymentLogsContractV1 = oc.route({
 	path: "/v1/deployments/{deploymentId}/logs",
 	method: "GET",
@@ -342,14 +803,129 @@ const listTeamsContractV1 = oc.route({
 	id: z.string(),
 	name: z.string(),
 	createdAt: z.coerce.date(),
-	hasStripeAccount: z.boolean(),
-	hasActiveSubscription: z.boolean()
+	hasStripeAccount: z.boolean()
 })));
+const getTunnelTicketContractV1 = oc.route({
+	path: "/v1/tunnels/ticket",
+	method: "GET",
+	summary: "Get a tunnel ticket",
+	description: "Get a signed ticket for establishing a tunnel connection. Requires user authentication (API keys are not supported).",
+	tags: ["tunnels"],
+	successDescription: "The tunnel ticket"
+}).output(z.object({
+	subdomain: z.string().describe("The subdomain assigned to the user"),
+	ticket: z.string().describe("The signed tunnel ticket"),
+	tunnelHost: z.string().describe("The tunnel host to connect to")
+}));
+const publishServerContractV1 = oc.route({
+	path: "/v1/distribution/publish",
+	method: "POST",
+	summary: "Publish a server to the MCP registry",
+	tags: ["distribution"],
+	successDescription: "The server has been published successfully"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	projectId: z.string(),
+	domain: z.string(),
+	title: z.string().min(1).max(100),
+	description: z.string().min(1).max(100),
+	websiteUrl: z.url().max(255).optional(),
+	iconSrc: z.url().max(255).optional(),
+	dryRun: z.boolean().optional()
+})).output(z.object({ serverFields: serverFieldsSchema }));
+const getServerInfoContractV1 = oc.route({
+	path: "/v1/distribution/get",
+	method: "GET",
+	summary: "Get server info",
+	description: "Get info about a server",
+	tags: ["distribution"],
+	successDescription: "The server info"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	projectId: z.string(),
+	domain: z.string()
+})).output(z.object({ serverFields: serverFieldsSchema }));
+const playgroundServerMetadataOutputSchema = z.object({
+	name: z.string(),
+	description: z.string(),
+	headers: z.array(z.object({
+		name: z.string(),
+		description: z.string(),
+		isRequired: z.boolean(),
+		isSecret: z.boolean()
+	})),
+	examplePrompts: z.array(playgroundExamplePromptSchema)
+});
+const playgroundOutputSchema = z.object({
+	isPlaygroundEnabled: z.boolean(),
+	serverMetadata: playgroundServerMetadataOutputSchema.nullable()
+});
+const getPlaygroundContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/playground",
+	method: "GET",
+	summary: "Get playground configuration",
+	description: "Get the playground configuration for an environment",
+	tags: ["environments"],
+	successDescription: "The playground configuration"
+}).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(playgroundOutputSchema);
+const upsertPlaygroundContractV1 = oc.route({
+	path: "/v1/environments/{environmentId}/playground",
+	method: "PUT",
+	summary: "Update playground configuration",
+	description: "Update the playground configuration for an environment. All fields are optional — only provided fields are updated.",
+	tags: ["environments"],
+	successDescription: "The updated playground configuration"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	isPlaygroundEnabled: z.boolean().optional(),
+	name: z.string().min(1).max(100).optional(),
+	description: z.string().min(1).max(500).optional(),
+	headers: z.array(playgroundHeaderSchema).optional(),
+	examplePrompts: z.array(playgroundExamplePromptSchema).max(3).optional()
+})).output(playgroundOutputSchema);
+const createBeaconContractV1 = oc.route({
+	path: "/v1/beacon/audits",
+	method: "POST",
+	summary: "Create a beacon audit",
+	description: "Audit an MCP server for spec compliance and AI client compatibility",
+	tags: ["beacon"],
+	successDescription: "The audit has been created"
+}).errors({
+	NOT_FOUND: {},
+	BAD_REQUEST: {}
+}).input(z.object({
+	targetUrl: z.url().describe("The HTTPS URL of the MCP server to audit"),
+	teamId: z.string().optional().describe("The team ID to associate the audit with"),
+	projectId: z.string().optional().describe("The project ID to associate the audit with"),
+	excludeCategories: z.array(checkCategorySchema).optional().describe("Check categories to exclude from the audit")
+})).output(z.object({ id: z.string() }));
+const getBeaconContractV1 = oc.route({
+	path: "/v1/beacon/audits/{auditId}",
+	method: "GET",
+	summary: "Get a beacon audit",
+	description: "Get a beacon audit by ID, including the report if completed",
+	tags: ["beacon"],
+	successDescription: "The audit details"
+}).errors({ NOT_FOUND: {} }).input(z.object({ auditId: z.string().describe("The ID of the audit") })).output(z.object({
+	id: z.string(),
+	targetUrl: z.string(),
+	status: auditStatusSchema,
+	durationMs: z.number().nullable(),
+	createdAt: z.coerce.date(),
+	report: auditReportWithScreenshotsSchema.nullable()
+}));
 const contract = {
 	teams: { list: { v1: listTeamsContractV1 } },
 	analytics: { get: { v1: getProjectAnalyticsContractV1 } },
 	deployments: {
-		list: { v1: listProjectDeploymentsContractV1 },
+		list: { v1: listDeploymentsContractV1 },
 		get: { v1: getDeploymentContractV1 },
 		uploadArtifact: { v1: uploadDeploymentArtifactContractV1 },
 		getLogs: { v1: getDeploymentLogsContractV1 }
@@ -357,7 +933,15 @@ const contract = {
 	environments: {
 		create: { v1: createEnvironmentContractV1 },
 		get: { v1: getEnvironmentContractV1 },
-		deploy: { v1: deployEnvironmentContractV1 }
+		deploy: { v1: deployEnvironmentContractV1 },
+		getLogs: { v1: getLogsContractV1 },
+		getLatestLogs: { v1: getLatestLogsContractV1 }
+	},
+	environmentVariables: {
+		list: { v1: listEnvironmentVariablesContractV1 },
+		create: { v1: createEnvironmentVariablesContractV1 },
+		update: { v1: updateEnvironmentVariableContractV1 },
+		delete: { v1: deleteEnvironmentVariableContractV1 }
 	},
 	projects: {
 		update: { v1: updateProjectContractV1 },
@@ -365,8 +949,20 @@ const contract = {
 		list: { v1: listProjectsContractV1 },
 		create: { v1: createProjectContractV1 },
 		delete: { v1: deleteProjectContractV1 }
+	},
+	playground: {
+		get: { v1: getPlaygroundContractV1 },
+		upsert: { v1: upsertPlaygroundContractV1 }
+	},
+	tunnels: { getTicket: { v1: getTunnelTicketContractV1 } },
+	distribution: {
+		publish: { v1: publishServerContractV1 },
+		get: { v1: getServerInfoContractV1 }
+	},
+	beacon: {
+		create: { v1: createBeaconContractV1 },
+		get: { v1: getBeaconContractV1 }
 	}
 };
-
 //#endregion
-export { buildSettingsSchema, contract, createEnvironmentContractV1, environmentVariableSchema, environmentVariablesSchema, runtimeSchema, transportSchema };
+export { PLATFORM_LABELS, buildSettingsSchema, contract, createEnvironmentContractV1, deploymentStatusSchema, environmentVariableSchema, environmentVariablesSchema, playgroundExamplePromptSchema, playgroundHeaderSchema, runtimeSchema, serverFieldsSchema, transportSchema, updateEnvironmentVariableSchema };