@alpic-ai/api 0.0.0-staging.ffd67d5 → 0.0.0-staging.g019b064

package/dist/index.mjs

@@ -1,72 +1,196 @@
+import { z } from "zod";
+import * as z$1 from "zod/v4";
 import { oc } from "@orpc/contract";
 import ms from "ms";
-import { z } from "zod";
-//#region src/schemas.ts
-const RESERVED_KEYS = [
-	"_HANDLER",
-	"_X_AMZN_TRACE_ID",
-	"AWS_DEFAULT_REGION",
-	"AWS_REGION",
-	"AWS_EXECUTION_ENV",
-	"AWS_LAMBDA_FUNCTION_NAME",
-	"AWS_LAMBDA_FUNCTION_MEMORY_SIZE",
-	"AWS_LAMBDA_FUNCTION_VERSION",
-	"AWS_LAMBDA_INITIALIZATION_TYPE",
-	"AWS_LAMBDA_LOG_GROUP_NAME",
-	"AWS_LAMBDA_LOG_STREAM_NAME",
-	"AWS_ACCESS_KEY",
-	"AWS_ACCESS_KEY_ID",
-	"AWS_SECRET_ACCESS_KEY",
-	"AWS_SESSION_TOKEN",
-	"AWS_LAMBDA_RUNTIME_API",
-	"LAMBDA_TASK_ROOT",
-	"LAMBDA_RUNTIME_DIR",
-	"START_COMMAND",
-	"ENVIRONMENT_ID",
-	"PROJECT_BUILD_IMAGES_REPOSITORY_URI",
-	"ENVIRONMENT_LAMBDA_FUNCTION_ARN",
-	"SOURCE_REPOSITORY",
-	"SOURCE_BRANCH",
-	"SOURCE_REPOSITORY_CREDENTIALS",
-	"RUNTIME",
-	"ROOT_DIRECTORY",
-	"BUILD_ARG_INSTALL_COMMAND",
-	"BUILD_ARG_BUILD_COMMAND",
-	"BUILD_ARG_BUILD_OUTPUT_DIR",
-	"BUILD_ARG_START_COMMAND",
-	"ALPIC_HOST",
-	"ALPIC_CUSTOM_DOMAINS"
-];
-const environmentVariableSchema = z.object({
-	key: z.string().min(2, "Key must be at least 2 characters").regex(/^[a-zA-Z]([a-zA-Z0-9_])+$/, "Key must start with a letter and contain only letters, numbers, and underscores").refine((key) => !RESERVED_KEYS.includes(key), "This key is reserved and cannot be used as an environment variable key"),
-	value: z.string().min(1, "Value is required"),
-	isSecret: z.boolean().default(false)
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_supports-color@7.2.0_zod@4.5.4/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+/**
+* Reusable URL validation that disallows javascript: scheme
+*/
+const SafeUrlSchema = z$1.url().superRefine((val, ctx) => {
+	if (!URL.canParse(val)) {
+		ctx.addIssue({
+			code: z$1.ZodIssueCode.custom,
+			message: "URL must be parseable",
+			fatal: true
+		});
+		return z$1.NEVER;
+	}
+}).refine((url) => {
+	const u = new URL(url);
+	return u.protocol !== "javascript:" && u.protocol !== "data:" && u.protocol !== "vbscript:";
+}, { message: "URL cannot use javascript:, data:, or vbscript: scheme" });
+/**
+* RFC 9728 OAuth Protected Resource Metadata
+*/
+const OAuthProtectedResourceMetadataSchema = z$1.looseObject({
+	resource: z$1.string().url(),
+	authorization_servers: z$1.array(SafeUrlSchema).optional(),
+	jwks_uri: z$1.string().url().optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	bearer_methods_supported: z$1.array(z$1.string()).optional(),
+	resource_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	resource_name: z$1.string().optional(),
+	resource_documentation: z$1.string().optional(),
+	resource_policy_uri: z$1.string().url().optional(),
+	resource_tos_uri: z$1.string().url().optional(),
+	tls_client_certificate_bound_access_tokens: z$1.boolean().optional(),
+	authorization_details_types_supported: z$1.array(z$1.string()).optional(),
+	dpop_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	dpop_bound_access_tokens_required: z$1.boolean().optional()
 });
-const environmentVariablesSchema = z.array(environmentVariableSchema);
-const buildSettingsSchema = z.object({
-	installCommand: z.string().optional(),
-	buildCommand: z.string().optional(),
-	buildOutputDir: z.string().optional(),
-	startCommand: z.string().optional()
+/**
+* RFC 8414 OAuth 2.0 Authorization Server Metadata
+*/
+const OAuthMetadataSchema = z$1.looseObject({
+	issuer: z$1.string(),
+	authorization_endpoint: SafeUrlSchema,
+	token_endpoint: SafeUrlSchema,
+	registration_endpoint: SafeUrlSchema.optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	response_types_supported: z$1.array(z$1.string()),
+	response_modes_supported: z$1.array(z$1.string()).optional(),
+	grant_types_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	service_documentation: SafeUrlSchema.optional(),
+	revocation_endpoint: SafeUrlSchema.optional(),
+	revocation_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	revocation_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	introspection_endpoint: z$1.string().optional(),
+	introspection_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	introspection_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	code_challenge_methods_supported: z$1.array(z$1.string()).optional(),
+	client_id_metadata_document_supported: z$1.boolean().optional()
 });
-const runtimeSchema = z.enum([
-	"python3.13",
-	"python3.14",
-	"node22",
-	"node24"
-]);
-const transportSchema = z.enum([
-	"stdio",
-	"sse",
-	"streamablehttp"
-]);
-const analysisStatusSchema = z.enum([
+/**
+* OpenID Connect Discovery 1.0 Provider Metadata
+* see: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
+*/
+const OpenIdProviderMetadataSchema = z$1.looseObject({
+	issuer: z$1.string(),
+	authorization_endpoint: SafeUrlSchema,
+	token_endpoint: SafeUrlSchema,
+	userinfo_endpoint: SafeUrlSchema.optional(),
+	jwks_uri: SafeUrlSchema,
+	registration_endpoint: SafeUrlSchema.optional(),
+	scopes_supported: z$1.array(z$1.string()).optional(),
+	response_types_supported: z$1.array(z$1.string()),
+	response_modes_supported: z$1.array(z$1.string()).optional(),
+	grant_types_supported: z$1.array(z$1.string()).optional(),
+	acr_values_supported: z$1.array(z$1.string()).optional(),
+	subject_types_supported: z$1.array(z$1.string()),
+	id_token_signing_alg_values_supported: z$1.array(z$1.string()),
+	id_token_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	id_token_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	userinfo_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_encryption_alg_values_supported: z$1.array(z$1.string()).optional(),
+	request_object_encryption_enc_values_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_methods_supported: z$1.array(z$1.string()).optional(),
+	token_endpoint_auth_signing_alg_values_supported: z$1.array(z$1.string()).optional(),
+	display_values_supported: z$1.array(z$1.string()).optional(),
+	claim_types_supported: z$1.array(z$1.string()).optional(),
+	claims_supported: z$1.array(z$1.string()).optional(),
+	service_documentation: z$1.string().optional(),
+	claims_locales_supported: z$1.array(z$1.string()).optional(),
+	ui_locales_supported: z$1.array(z$1.string()).optional(),
+	claims_parameter_supported: z$1.boolean().optional(),
+	request_parameter_supported: z$1.boolean().optional(),
+	request_uri_parameter_supported: z$1.boolean().optional(),
+	require_request_uri_registration: z$1.boolean().optional(),
+	op_policy_uri: SafeUrlSchema.optional(),
+	op_tos_uri: SafeUrlSchema.optional(),
+	client_id_metadata_document_supported: z$1.boolean().optional()
+});
+/**
+* OpenID Connect Discovery metadata that may include OAuth 2.0 fields
+* This schema represents the real-world scenario where OIDC providers
+* return a mix of OpenID Connect and OAuth 2.0 metadata fields
+*/
+const OpenIdProviderDiscoveryMetadataSchema = z$1.object({
+	...OpenIdProviderMetadataSchema.shape,
+	...OAuthMetadataSchema.pick({ code_challenge_methods_supported: true }).shape
+});
+z$1.object({
+	access_token: z$1.string(),
+	id_token: z$1.string().optional(),
+	token_type: z$1.string(),
+	expires_in: z$1.coerce.number().optional(),
+	scope: z$1.string().optional(),
+	refresh_token: z$1.string().optional()
+}).strip();
+z$1.object({
+	error: z$1.string(),
+	error_description: z$1.string().optional(),
+	error_uri: z$1.string().optional()
+});
+/**
+* Optional version of SafeUrlSchema that allows empty string for retrocompatibility on tos_uri and logo_uri
+*/
+const OptionalSafeUrlSchema = SafeUrlSchema.optional().or(z$1.literal("").transform(() => void 0));
+/**
+* RFC 7591 OAuth 2.0 Dynamic Client Registration metadata
+*/
+const OAuthClientMetadataSchema = z$1.object({
+	redirect_uris: z$1.array(SafeUrlSchema),
+	token_endpoint_auth_method: z$1.string().optional(),
+	grant_types: z$1.array(z$1.string()).optional(),
+	response_types: z$1.array(z$1.string()).optional(),
+	client_name: z$1.string().optional(),
+	client_uri: SafeUrlSchema.optional(),
+	logo_uri: OptionalSafeUrlSchema,
+	scope: z$1.string().optional(),
+	contacts: z$1.array(z$1.string()).optional(),
+	tos_uri: OptionalSafeUrlSchema,
+	policy_uri: z$1.string().optional(),
+	jwks_uri: SafeUrlSchema.optional(),
+	jwks: z$1.any().optional(),
+	software_id: z$1.string().optional(),
+	software_version: z$1.string().optional(),
+	software_statement: z$1.string().optional()
+}).strip();
+/**
+* RFC 7591 OAuth 2.0 Dynamic Client Registration client information
+*/
+const OAuthClientInformationSchema = z$1.object({
+	client_id: z$1.string(),
+	client_secret: z$1.string().optional(),
+	client_id_issued_at: z$1.number().optional(),
+	client_secret_expires_at: z$1.number().optional()
+}).strip();
+OAuthClientMetadataSchema.merge(OAuthClientInformationSchema);
+z$1.object({
+	error: z$1.string(),
+	error_description: z$1.string().optional()
+}).strip();
+z$1.object({
+	token: z$1.string(),
+	token_type_hint: z$1.string().optional()
+}).strip();
+//#endregion
+//#region ../domains/dist/index.mjs
+const AI_PLATFORMS = ["chatgpt", "claudeai"];
+const platformSchema = z.enum(AI_PLATFORMS);
+const PLATFORM_LABELS = {
+	chatgpt: "ChatGPT",
+	claudeai: "Claude.ai"
+};
+const WAF_PLATFORMS = [
+	"akamai",
+	"cato",
+	"cloudflare",
+	"fastly"
+];
+const ALLOWED_PLATFORMS = [...AI_PLATFORMS, ...WAF_PLATFORMS];
+const allowedPlatformSchema = z.enum(ALLOWED_PLATFORMS);
+const auditStatusSchema = z.enum([
 	"pending",
 	"partial",
 	"completed",
 	"failed"
 ]);
-const platformSchema = z.enum(["chatgpt", "claudeai"]);
 const checkSeveritySchema = z.enum([
 	"error",
 	"warning",
@@ -86,6 +210,8 @@ const checkDetailSchema = z.object({
 });
 const checkResultSchema = z.object({
 	checkId: z.string(),
+	checkName: z.string(),
+	description: z.string(),
 	status: z.enum([
 		"pass",
 		"fail",
@@ -117,12 +243,1344 @@ const auditReportSchema = z.object({
 	widgetScreenshotKeys: z.object({
 		chatgpt: z.string().optional(),
 		claudeai: z.string().optional()
-	}).optional(),
-	widgetScreenshots: z.object({
-		chatgpt: z.object({ url: z.string() }).optional(),
-		claudeai: z.object({ url: z.string() }).optional()
+	})
+});
+const widgetScreenshotSchema = z.object({ url: z.string() });
+const auditReportWithScreenshotsSchema = auditReportSchema.extend({ widgetScreenshots: z.object({
+	chatgpt: widgetScreenshotSchema.optional(),
+	claudeai: widgetScreenshotSchema.optional()
+}) });
+z.object({
+	id: z.string(),
+	environmentId: z.string(),
+	clientId: z.string(),
+	clientSecret: z.string(),
+	clientScopes: z.array(z.string())
+});
+const creditEntryReasonSchema = z.enum([
+	"free_seed",
+	"paid_conversion_floor",
+	"top_up",
+	"usage",
+	"admin_adjustment"
+]);
+z.enum(["playground"]);
+z.number().int().min(500);
+const creditActivityEntrySchema = z.object({
+	reason: creditEntryReasonSchema,
+	day: z.number(),
+	amountInNanoUSD: z.number(),
+	messageCount: z.number().nullable()
+});
+z.object({
+	balanceInNanoUSD: z.number(),
+	recentActivity: z.array(creditActivityEntrySchema)
+});
+const deploymentStatusSchema$1 = z.enum([
+	"ongoing",
+	"deployed",
+	"failed",
+	"canceled"
+]);
+z.object({
+	timestamp: z.coerce.date().optional(),
+	content: z.string().optional()
+});
+const deploymentSummarySchema = z.object({
+	id: z.string(),
+	status: deploymentStatusSchema$1,
+	sourceBucket: z.string().nullable(),
+	sourceObjectKey: z.string().nullable(),
+	sourceRef: z.string().nullable(),
+	sourceCommitId: z.string().nullable(),
+	sourceCommitMessage: z.string().nullable(),
+	environmentId: z.string(),
+	authorUsername: z.string().nullable(),
+	authorAvatarUrl: z.string().nullable(),
+	startedAt: z.coerce.date().nullable(),
+	completedAt: z.coerce.date().nullable(),
+	isCurrent: z.boolean().optional(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+/** Public environment: answers anonymously and exposes no OAuth metadata. */
+const publicEnvironmentSchema = z.object({
+	allowsAnonymous: z.literal(true),
+	oAuthMetadata: z.strictObject({})
+});
+/** Protected environment whose external resource metadata URL is returned in the WWW-Authenticate header on the first 401; everything after is handled outside the MCP server scope. */
+const externalResourceMetadataEnvironmentSchema = z.object({
+	allowsAnonymous: z.boolean(),
+	oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
+	scope: z.string().optional()
+});
+/** Protected environment whose own /.well-known/oauth-protected-resource endpoint points at an external authorization server; everything after is handled outside the MCP server scope. */
+const externalAuthorizationServerEnvironmentSchema = z.object({
+	allowsAnonymous: z.boolean(),
+	oAuthMetadata: z.object({
+		externalAuthorizationServerUrl: z.url(),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+/** Standalone protected environment: the server itself exposes both the /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server endpoints. */
+const standaloneEnvironmentSchema = z.object({
+	allowsAnonymous: z.boolean(),
+	oAuthMetadata: z.object({
+		authorizationServerMetadata: z.union([OAuthMetadataSchema, OpenIdProviderDiscoveryMetadataSchema]),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+/** Protected environment that enforces authentication but advertises no OAuth discovery metadata; clients must obtain credentials out-of-band. */
+const protectedWithoutDiscoveryEnvironmentSchema = z.object({
+	allowsAnonymous: z.literal(false),
+	oAuthMetadata: z.strictObject({}),
+	scope: z.string().optional()
+});
+const legacyPublicEnvironmentSchema = z.object({
+	isPublic: z.literal(true),
+	oAuthMetadata: z.undefined().optional()
+});
+const legacyExternalResourceMetadataEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({ externalResourceMetadataUrl: z.url() }),
+	scope: z.string().optional()
+});
+const legacyExternalAuthorizationServerEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({
+		externalAuthorizationServerUrl: z.url(),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+const legacyStandaloneEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.object({
+		authorizationServerMetadata: z.union([OAuthMetadataSchema, OpenIdProviderDiscoveryMetadataSchema]),
+		resourceMetadata: OAuthProtectedResourceMetadataSchema.optional()
+	}),
+	scope: z.string().optional()
+});
+const legacyProtectedWithoutDiscoveryEnvironmentSchema = z.object({
+	isPublic: z.literal(false),
+	oAuthMetadata: z.strictObject({}),
+	scope: z.string().optional()
+});
+z.union([
+	publicEnvironmentSchema,
+	externalResourceMetadataEnvironmentSchema,
+	externalAuthorizationServerEnvironmentSchema,
+	standaloneEnvironmentSchema,
+	protectedWithoutDiscoveryEnvironmentSchema,
+	legacyPublicEnvironmentSchema,
+	legacyExternalResourceMetadataEnvironmentSchema,
+	legacyExternalAuthorizationServerEnvironmentSchema,
+	legacyStandaloneEnvironmentSchema,
+	legacyProtectedWithoutDiscoveryEnvironmentSchema
+]);
+const playgroundModelSchema = z.enum([
+	"global.anthropic.claude-haiku-4-5-20251001-v1:0",
+	"global.anthropic.claude-sonnet-4-5-20250929-v1:0",
+	"openai.gpt-5.4",
+	"openai.gpt-5.5"
+]);
+const environmentDomainSchema = z.object({
+	name: z.string(),
+	status: z.enum([
+		"ongoing",
+		"deployed",
+		"failed"
+	]),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const environmentSchema$1 = z.object({
+	id: z.string(),
+	name: z.string(),
+	sourceBranch: z.string().nullable(),
+	mcpServerUrl: z.string(),
+	activeDeployment: deploymentSummarySchema.optional(),
+	latestDeployment: deploymentSummarySchema.optional(),
+	openaiAppsChallenge: z.string().nullable().optional(),
+	isPlaygroundEnabled: z.boolean(),
+	playgroundModel: playgroundModelSchema,
+	isIpWhitelistEnabled: z.boolean(),
+	ipAllowlist: z.array(z.string()).nullable(),
+	allowedPlatforms: z.array(allowedPlatformSchema),
+	projectId: z.string(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const environmentWithDomainsSchema = environmentSchema$1.extend({ domains: z.array(environmentDomainSchema) });
+z.object({
+	sessionReplayEnabled: z.boolean(),
+	collectRequestPayload: z.boolean(),
+	collectResponsePayload: z.boolean(),
+	collectErrorMessage: z.boolean(),
+	collectUserData: z.boolean(),
+	identityTraitKey: z.string().min(1).max(200).nullable()
+});
+const feedbackSchema = z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	content: z.string(),
+	source: z.enum(["model", "user"]),
+	clientName: z.string().nullable()
+});
+z.object({
+	content: z.string(),
+	source: z.enum(["model", "user"])
+});
+const intentCategoryColorSchema = z.enum([
+	"red",
+	"orange",
+	"yellow",
+	"green",
+	"blue",
+	"purple",
+	"pink",
+	"gray"
+]);
+const INTENT_CATEGORY_COLORS = intentCategoryColorSchema.options;
+const intentCategorySchema = z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema
+});
+const intentCategorySummarySchema = z.object({
+	id: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema,
+	intentCount: z.number().int().nonnegative()
+});
+z.object({
+	id: z.string(),
+	createdAt: z.coerce.date(),
+	environmentId: z.string(),
+	toolName: z.string(),
+	message: z.string(),
+	clientName: z.string().nullable(),
+	categories: z.array(intentCategorySchema)
+});
+const signalCategorySchema = z.object({
+	id: z.string(),
+	name: z.string(),
+	color: intentCategoryColorSchema
+});
+z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("new"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		currentShare: z.number()
+	}),
+	z.object({
+		kind: z.literal("resurging"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		daysQuiet: z.number(),
+		currentShare: z.number()
+	}),
+	z.object({
+		kind: z.literal("spike"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		previousCount: z.number().int().nonnegative(),
+		currentShare: z.number(),
+		previousShare: z.number(),
+		changeRatio: z.number()
+	}),
+	z.object({
+		kind: z.literal("declining"),
+		category: signalCategorySchema,
+		currentCount: z.number().int().nonnegative(),
+		previousCount: z.number().int().nonnegative(),
+		currentShare: z.number(),
+		previousShare: z.number(),
+		changeRatio: z.number()
+	})
+]);
+z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("existing"),
+	categoryId: z.string(),
+	categoryName: z.string(),
+	intentIds: z.array(z.string())
+}), z.object({
+	kind: z.literal("new"),
+	categoryName: z.string(),
+	intentIds: z.array(z.string())
+})]);
+z.object({
+	id: z.string(),
+	teamId: z.string(),
+	email: z.string(),
+	expiresAt: z.coerce.date(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const alpicMcpRequestLogSchema = z.object({
+	type: z.literal("mcp_request"),
+	method: z.string()
+});
+const alpicMcpErrorLogSchema = z.object({
+	type: z.literal("mcp_error"),
+	method: z.string(),
+	error: z.string()
+});
+z.union([alpicMcpRequestLogSchema, alpicMcpErrorLogSchema]);
+z.enum([
+	"INFO",
+	"WARNING",
+	"DEBUG",
+	"ERROR"
+]);
+/** Only names a vendor actually ships belong here: lookalikes like `claude-code-test` are customers' own scripts. */
+const MCP_CLIENT_GROUPS = [
+	{
+		id: "claude_code",
+		label: "Claude Code",
+		vendor: "anthropic",
+		rawNames: ["claude-code", "Anthropic/ClaudeCodeDesktop"]
+	},
+	{
+		id: "claude",
+		label: "Claude",
+		vendor: "anthropic",
+		rawNames: [
+			"Anthropic/ClaudeAI",
+			"claude-ai",
+			"claude",
+			"Claude",
+			"claude-desktop",
+			"claude-desktop-3p"
+		]
+	},
+	{
+		id: "claude_mobile",
+		label: "Claude mobile",
+		vendor: "anthropic",
+		rawNames: ["claude-ios", "ClaudeAndroid"]
+	},
+	{
+		id: "claude_cowork",
+		label: "Claude Cowork",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/Cowork"]
+	},
+	{
+		id: "claude_toolbox",
+		label: "Claude Toolbox",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/Toolbox", "Anthropic/toolbox-bootstrap"]
+	},
+	{
+		id: "anthropic_api",
+		label: "Anthropic API",
+		vendor: "anthropic",
+		rawNames: ["Anthropic/API"]
+	},
+	{
+		id: "anthropic_connector_refresh",
+		label: "Anthropic (connector refresh)",
+		vendor: "anthropic",
+		rawNames: ["Anthropic"]
+	},
+	{
+		id: "codex",
+		label: "Codex",
+		vendor: "openai",
+		rawNames: [
+			"codex-mcp-client",
+			"codex",
+			"Codex",
+			"codex-cli",
+			"openai-mcp (Codex)"
+		]
+	},
+	{
+		id: "chatgpt",
+		label: "ChatGPT",
+		vendor: "openai",
+		rawNames: ["openai-mcp (ChatGPT)"]
+	},
+	{
+		id: "openai_responses_api",
+		label: "OpenAI Responses API",
+		vendor: "openai",
+		rawNames: ["openai-mcp (Responses API)"]
+	},
+	{
+		id: "openai_agent_builder",
+		label: "OpenAI Agent Builder",
+		vendor: "openai",
+		rawNames: ["openai-mcp (Agent Builder)"]
+	},
+	{
+		id: "openai_other",
+		label: "OpenAI Other",
+		vendor: "openai",
+		rawNames: ["openai-mcp"]
+	},
+	{
+		id: "cursor",
+		label: "Cursor",
+		vendor: "cursor",
+		rawNames: [
+			"cursor-vscode",
+			"Cursor",
+			"cursor"
+		]
+	},
+	{
+		id: "cline",
+		label: "Cline",
+		vendor: "cline",
+		rawNames: [
+			"Cline",
+			"cline",
+			"@cline/core"
+		]
+	},
+	{
+		id: "github_copilot",
+		label: "GitHub Copilot",
+		vendor: "githubCopilot",
+		rawNames: [
+			"Copilot",
+			"github-copilot-developer",
+			"Copilot MCP Gateway",
+			"Xcode/copilot-xcode"
+		]
+	},
+	{
+		id: "gemini_cli",
+		label: "Gemini CLI",
+		vendor: "google",
+		rawNames: ["gemini-cli-mcp-client", "gemini-cli"]
+	},
+	{
+		id: "antigravity",
+		label: "Antigravity",
+		vendor: "google",
+		rawNames: ["antigravity-client"]
+	},
+	{
+		id: "gemini",
+		label: "Gemini",
+		vendor: "google",
+		rawNames: ["Gemini", "google-ai-edge-gallery"]
+	},
+	{
+		id: "windsurf",
+		label: "Windsurf",
+		vendor: "windsurf",
+		rawNames: ["Windsurf", "windsurf-client"]
+	},
+	{
+		id: "mistral",
+		label: "Mistral / Le Chat",
+		vendor: "mistral",
+		rawNames: ["Mistral"],
+		rawNamePrefixes: ["connector:custom-mcp:"]
+	},
+	{
+		id: "n8n",
+		label: "n8n",
+		vendor: "n8n",
+		rawNames: [
+			"@n8n/n8n-nodes-langchain.mcpClient",
+			"@n8n/n8n-nodes-langchain.mcpClientTool",
+			"n8n"
+		]
+	},
+	{
+		id: "alpic_playground",
+		label: "Alpic Playground",
+		vendor: "alpic",
+		rawNames: ["alpic-playground", "playground"]
+	},
+	{
+		id: "opencode",
+		label: "opencode",
+		vendor: "opencode",
+		rawNames: ["opencode"]
+	},
+	{
+		id: "zed",
+		label: "Zed",
+		vendor: "zed",
+		rawNames: ["Zed", "zed"]
+	},
+	{
+		id: "zapier",
+		label: "Zapier",
+		vendor: "zapier",
+		rawNames: ["Zapier", "zapier"]
+	},
+	{
+		id: "make",
+		label: "Make",
+		vendor: "make",
+		rawNames: ["Make", "make"]
+	},
+	{
+		id: "librechat",
+		label: "LibreChat",
+		vendor: "mcp",
+		rawNames: ["LibreChat", "librechat"]
+	},
+	{
+		id: "jan",
+		label: "Jan",
+		vendor: "mcp",
+		rawNames: ["Jan", "jan"]
+	},
+	{
+		id: "goose",
+		label: "goose",
+		vendor: "mcp",
+		rawNames: ["goose", "Goose"]
+	},
+	{
+		id: "mcphost",
+		label: "mcphost",
+		vendor: "mcp",
+		rawNames: ["mcphost"]
+	},
+	{
+		id: "mcporter",
+		label: "mcporter",
+		vendor: "mcp",
+		rawNames: ["mcporter"]
+	},
+	{
+		id: "rmcp",
+		label: "rmcp",
+		vendor: "mcp",
+		rawNames: ["rmcp"]
+	},
+	{
+		id: "unnamed_client",
+		label: "Unnamed client",
+		vendor: "mcp",
+		rawNames: [
+			"mcp",
+			"unknown",
+			""
+		]
+	}
+];
+/** A source pattern, not a RegExp, because analytics renders the same rule into ClickHouse RE2, which shares this syntax. */
+const MCP_REMOTE_WRAPPER_SUFFIX = String.raw` \(via mcp-remote [^\n]+?\)$`;
+new RegExp(MCP_REMOTE_WRAPPER_SUFFIX);
+new Map(MCP_CLIENT_GROUPS.map((group) => [group.id, group]));
+const runtimeSchema = z.enum([
+	"python3.13",
+	"python3.14",
+	"node22",
+	"node24"
+]);
+const transportSchema = z.enum([
+	"stdio",
+	"sse",
+	"streamablehttp"
+]);
+z.object({
+	id: z.string(),
+	name: z.string(),
+	teamId: z.string(),
+	sourceRepository: z.string().nullable(),
+	createdAt: z.coerce.date().optional(),
+	runtime: runtimeSchema,
+	transport: transportSchema.nullable(),
+	rootDirectory: z.string().nullable(),
+	installCommand: z.string().nullable(),
+	buildCommand: z.string().nullable(),
+	buildOutputDir: z.string().nullable(),
+	startCommand: z.string().nullable(),
+	fixedOutboundIp: z.boolean(),
+	environments: z.array(environmentWithDomainsSchema),
+	productionEnvironment: environmentWithDomainsSchema.nullable()
+});
+const domainFailureReasonSchema = z.enum([
+	"caa",
+	"dns",
+	"invalid_domain",
+	"other"
+]);
+const projectDomainMappingSchema = z.object({
+	pathPrefix: z.string(),
+	environment: environmentSchema$1
+});
+z.object({
+	name: z.string(),
+	createdAt: z.coerce.date(),
+	status: z.enum([
+		"ongoing",
+		"deployed",
+		"failed"
+	]),
+	failureReason: domainFailureReasonSchema.nullable(),
+	environment: environmentSchema$1,
+	mappings: z.array(projectDomainMappingSchema)
+});
+const serverFieldsSchema$1 = z.object({
+	$schema: z.string(),
+	name: z.string(),
+	description: z.string(),
+	version: z.string().optional(),
+	title: z.string().optional(),
+	websiteUrl: z.string().optional(),
+	icons: z.array(z.object({
+		src: z.string(),
+		mimeType: z.string().optional(),
+		sizes: z.array(z.string()).optional()
+	})).optional(),
+	remotes: z.array(z.object({
+		type: z.string(),
+		url: z.string().optional(),
+		headers: z.array(z.object({
+			name: z.string(),
+			description: z.string(),
+			isRequired: z.boolean().optional(),
+			isSecret: z.boolean().optional()
+		})).optional()
+	})).optional()
+}).catchall(z.unknown());
+z.object({
+	serverFields: serverFieldsSchema$1,
+	source: z.enum(["registry", "defaults"])
+});
+/** Clamps instead of rejecting on max-length overflow (for AI-generated copy that overshoots); intentionally carries over only maxLength, minLength, and description, dropping any other validators. */
+const clampStringField = (field) => {
+	const max = field.maxLength;
+	if (max === null) return field;
+	const clamped = z.string().overwrite((value) => value.slice(0, max)).max(max);
+	const withMin = field.minLength === null ? clamped : clamped.min(field.minLength);
+	return field.description ? withMin.describe(field.description) : withMin;
+};
+const toolDefinitionSchema = z.object({
+	name: z.string(),
+	title: z.string().optional().describe("Human-friendly name for the tool, used in the UI. If not provided, `name` will be used."),
+	description: z.string().optional(),
+	annotations: z.object({
+		readOnlyHint: z.boolean().optional(),
+		destructiveHint: z.boolean().optional(),
+		openWorldHint: z.boolean().optional(),
+		idempotentHint: z.boolean().optional()
 	}).optional()
 });
+const positiveTestCaseSchema = z.object({
+	scenario: z.string().describe("Short label for what this case demonstrates."),
+	userPrompt: z.string().describe("A realistic, standalone user message a reviewer can paste and run with no prior state or multi-turn setup. Vary phrasing and tone across cases."),
+	toolTriggered: z.string().optional().describe("The tool this prompt should invoke."),
+	expectedOutput: z.string().optional().describe("What the user should see, including post-interaction behaviour where relevant.")
+}).partial().describe("Each case: Scenario, User prompt, Tool triggered, Expected output.");
+const screenshotEntrySchema = z.object({
+	prompt: z.string(),
+	url: z.url()
+}).describe("Each screenshot: the user prompt that produced it + the image URL.");
+const screenshotDraftEntrySchema = screenshotEntrySchema.extend({ url: z.string() });
+/** Accepts either a valid email or URL. */
+const supportChannelSchema = z.string().refine((value) => z.email().safeParse(value).success || z.url().safeParse(value).success, { error: "Must be a valid email or URL" });
+/** A URL field whose error spells out that the scheme is required. */
+const urlField = z.url({ error: "Enter a full URL including https:// (e.g. https://example.com)" });
+const chatgptCategorySchema = z.enum([
+	"BUSINESS",
+	"COLLABORATION",
+	"DESIGN",
+	"DEVELOPER_TOOLS",
+	"EDUCATION",
+	"ENTERTAINMENT",
+	"FINANCE",
+	"FOOD",
+	"LIFESTYLE",
+	"NEWS",
+	"PRODUCTIVITY",
+	"SHOPPING",
+	"TRAVEL"
+]);
+const chatgptAuthenticationSchema = z.enum(["No auth needed", "OAuth 2.0"]);
+const chatgptCountryCodeSchema = z.enum([
+	"AD",
+	"AE",
+	"AF",
+	"AG",
+	"AL",
+	"AM",
+	"AO",
+	"AR",
+	"AT",
+	"AU",
+	"AW",
+	"AX",
+	"AZ",
+	"BA",
+	"BB",
+	"BD",
+	"BE",
+	"BF",
+	"BG",
+	"BH",
+	"BI",
+	"BJ",
+	"BL",
+	"BM",
+	"BN",
+	"BO",
+	"BR",
+	"BS",
+	"BT",
+	"BW",
+	"BZ",
+	"CA",
+	"CD",
+	"CF",
+	"CG",
+	"CH",
+	"CI",
+	"CL",
+	"CM",
+	"CO",
+	"CR",
+	"CV",
+	"CY",
+	"CZ",
+	"DE",
+	"DJ",
+	"DK",
+	"DM",
+	"DO",
+	"DZ",
+	"EC",
+	"EE",
+	"EG",
+	"ER",
+	"ES",
+	"ET",
+	"FI",
+	"FJ",
+	"FM",
+	"FO",
+	"FR",
+	"GA",
+	"GB",
+	"GD",
+	"GE",
+	"GF",
+	"GH",
+	"GL",
+	"GM",
+	"GN",
+	"GP",
+	"GQ",
+	"GR",
+	"GT",
+	"GW",
+	"GY",
+	"HN",
+	"HR",
+	"HT",
+	"HU",
+	"ID",
+	"IE",
+	"IL",
+	"IN",
+	"IQ",
+	"IS",
+	"IT",
+	"JM",
+	"JO",
+	"JP",
+	"KE",
+	"KG",
+	"KH",
+	"KI",
+	"KM",
+	"KN",
+	"KR",
+	"KW",
+	"KY",
+	"KZ",
+	"LA",
+	"LB",
+	"LC",
+	"LI",
+	"LK",
+	"LR",
+	"LS",
+	"LT",
+	"LU",
+	"LV",
+	"LY",
+	"MA",
+	"MC",
+	"MD",
+	"ME",
+	"MF",
+	"MG",
+	"MH",
+	"MK",
+	"ML",
+	"MM",
+	"MN",
+	"MQ",
+	"MR",
+	"MT",
+	"MU",
+	"MV",
+	"MW",
+	"MX",
+	"MY",
+	"MZ",
+	"NA",
+	"NC",
+	"NE",
+	"NG",
+	"NI",
+	"NL",
+	"NO",
+	"NP",
+	"NR",
+	"NZ",
+	"OM",
+	"PA",
+	"PE",
+	"PF",
+	"PG",
+	"PH",
+	"PK",
+	"PL",
+	"PM",
+	"PS",
+	"PT",
+	"PW",
+	"PY",
+	"QA",
+	"RE",
+	"RO",
+	"RS",
+	"RW",
+	"SA",
+	"SB",
+	"SC",
+	"SD",
+	"SE",
+	"SG",
+	"SH",
+	"SI",
+	"SJ",
+	"SK",
+	"SL",
+	"SM",
+	"SN",
+	"SO",
+	"SR",
+	"SS",
+	"ST",
+	"SV",
+	"SZ",
+	"TD",
+	"TF",
+	"TG",
+	"TH",
+	"TJ",
+	"TL",
+	"TM",
+	"TN",
+	"TO",
+	"TR",
+	"TT",
+	"TV",
+	"TW",
+	"TZ",
+	"UA",
+	"UG",
+	"US",
+	"UY",
+	"UZ",
+	"VA",
+	"VC",
+	"VN",
+	"VU",
+	"WF",
+	"WS",
+	"YE",
+	"YT",
+	"ZA",
+	"ZM",
+	"ZW"
+]);
+const chatgptAllowedCountriesSchema = z.discriminatedUnion("mode", [
+	z.object({ mode: z.literal("all") }),
+	z.object({
+		mode: z.literal("allow"),
+		countries: z.array(chatgptCountryCodeSchema)
+	}),
+	z.object({
+		mode: z.literal("block"),
+		countries: z.array(chatgptCountryCodeSchema)
+	})
+]);
+const chatgptTranslationLocaleSchema = z.enum([
+	"am",
+	"ar",
+	"bg-BG",
+	"bn-BD",
+	"bs-BA",
+	"ca-ES",
+	"cs-CZ",
+	"da-DK",
+	"de-DE",
+	"el-GR",
+	"es-419",
+	"es-ES",
+	"et-EE",
+	"fi-FI",
+	"fr-CA",
+	"fr-FR",
+	"gu-IN",
+	"hi-IN",
+	"hr-HR",
+	"hu-HU",
+	"hy-AM",
+	"id-ID",
+	"is-IS",
+	"it-IT",
+	"ja-JP",
+	"ka-GE",
+	"kk",
+	"kn-IN",
+	"ko-KR",
+	"lt",
+	"lv-LV",
+	"mk-MK",
+	"ml",
+	"mn",
+	"mr-IN",
+	"ms-MY",
+	"my-MM",
+	"nb-NO",
+	"nl-NL",
+	"pa",
+	"pl-PL",
+	"pt-BR",
+	"pt-PT",
+	"ro-RO",
+	"ru-RU",
+	"sk-SK",
+	"sl-SI",
+	"so-SO",
+	"sq-AL",
+	"sr-RS",
+	"sv-SE",
+	"sw-TZ",
+	"ta-IN",
+	"te-IN",
+	"th-TH",
+	"tl",
+	"tr-TR",
+	"uk-UA",
+	"ur",
+	"vi-VN",
+	"zh-CN",
+	"zh-HK",
+	"zh-TW"
+]);
+const negativeTestCaseSchema = z.object({
+	scenario: z.string(),
+	userPrompt: z.string()
+}).partial().describe("Each case: Scenario + User prompt (the app should NOT trigger).");
+const chatgptToolJustificationSchema = z.object({
+	toolName: z.string(),
+	readOnlyJustification: z.string().describe("One sentence on what the tool reads and returns."),
+	openWorldJustification: z.string().describe("One sentence on whether the tool reaches external systems beyond your own service."),
+	destructiveJustification: z.string().describe("One sentence on whether the tool changes data. For a read-only tool, state the full triad: \"No data is created, modified, or deleted.\"")
+}).describe("Per-tool justification of each MCP annotation value (one specific sentence per hint).");
+/** Defined once and reused by both the submission form and per-locale translations so the tagline ≤ 30 chars constraint never drifts. */
+const chatgptTaglineSchema = z.string().max(30);
+const chatgptDescriptionSchema = z.string();
+const chatgptTranslationSchema = z.object({
+	locale: chatgptTranslationLocaleSchema,
+	tagline: chatgptTaglineSchema,
+	description: chatgptDescriptionSchema
+}).describe("Locale-scoped override for tagline + description. English (US) is the default.");
+chatgptTranslationSchema.extend({ tagline: clampStringField(chatgptTaglineSchema) });
+/** Field order mirrors the ChatGPT (OpenAI) submission spreadsheet, grouped by section; keep it in sync with the sheet. */
+const chatgptSubmissionFormDataSchema = z.object({
+	logoLight: z.string().describe("Logo icon for light mode. Square PNG, no borders or rounded corners (clients apply circular cropping)."),
+	logoDark: z.string().optional().describe("Optional dark-mode logo icon. Square PNG, same specs as the light icon. Leave empty if the light icon also works on dark backgrounds."),
+	appName: z.string().describe("The name users will see in ChatGPT and in the Apps Directory."),
+	tagline: chatgptTaglineSchema.describe("Plain-language phrase focused on function and user value, 30 chars max. Avoid generic superlatives like \"the best …\"."),
+	description: chatgptDescriptionSchema.describe("Clear, engaging description highlighting what the app does and why people will love it. Appears publicly on the directory page. End it by naming the product categories or intents the app does NOT cover, so ChatGPT learns when not to route to it (define exclusions by absent categories or wrong intents, never by naming other brands)."),
+	category: chatgptCategorySchema.describe("Category from the OpenAI taxonomy."),
+	developerName: z.string().describe("Developer name shown publicly on the app's directory page."),
+	companyUrl: urlField.describe("Your company's main website URL."),
+	supportChannel: supportChannelSchema.describe("Customer support URL or email address."),
+	privacyPolicyUrl: urlField.describe("URL to your privacy policy."),
+	termsOfServiceUrl: urlField.describe("URL to the app's terms of service."),
+	demoRecordingUrl: urlField.describe("URL to a video demonstrating the app, recorded via OpenAI Developer Mode. Cover all main use cases on web, iOS, and Android."),
+	appCommerceAndPurchasing: z.boolean().describe("Checkbox: 'My app links or directs users out of ChatGPT to make purchases.' Defaults to false. Verify the app does not offer digital goods."),
+	serverUrl: urlField.describe("URL of the MCP server."),
+	authentication: chatgptAuthenticationSchema.describe("OAuth 2.0 or No auth. OAuth configuration is auto-discovered from the MCP server's metadata."),
+	tools: z.array(toolDefinitionSchema).describe("List of tools exposed by the MCP server (auto-populated from the production server's manifest)."),
+	toolJustifications: z.array(chatgptToolJustificationSchema).describe("Per-tool justification of `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotation values. One short, specific sentence per hint describing what the tool actually does."),
+	testCases: z.array(positiveTestCaseSchema).describe("At least 5 positive test cases. Each: Scenario, User prompt, Tool triggered, Expected output. Collectively cover the full capability across different flow stages (initial search or browse, market or locale handling, post-interaction detail, an action ChatGPT performs on the user's behalf, and a conversion or secondary tool) rather than five variations of the same first step."),
+	negativeTestCases: z.array(negativeTestCaseSchema).describe("3 negative test cases: prompts where the app should NOT trigger but the model might think it is relevant. These become production routing metadata that teaches ChatGPT when to stay silent, so pick tight near-misses: a product category the app does not carry, the right brand or domain but an intent the app does not serve, or a boundary with a sibling app."),
+	screenshots: z.array(screenshotEntrySchema.extend({ prompt: z.string().max(75, { error: "Screenshot prompts are limited to 75 characters." }) })).max(3).describe("In-app screenshots paired with the user prompt that produced them (each prompt is 75 characters max). Widget apps must show the widget UI; non-widget apps show the model response. Min 1, max 3 entries, all public. Images: 706px wide, 400–860px tall, PNG."),
+	translations: z.array(chatgptTranslationSchema).describe("Per-locale translation of tagline + description. English (US) is the default."),
+	allowedCountries: chatgptAllowedCountriesSchema.describe("Availability: all supported countries, or an allow-list / block-list of specific ones (ISO alpha-2)."),
+	releaseNotes: z.string().describe("Publicly displayed on the app details page.")
+});
+const chatgptSubmissionDraftSchema = chatgptSubmissionFormDataSchema.partial().extend({
+	tagline: z.string().optional(),
+	companyUrl: z.string().optional(),
+	supportChannel: z.string().optional(),
+	privacyPolicyUrl: z.string().optional(),
+	termsOfServiceUrl: z.string().optional(),
+	demoRecordingUrl: z.string().optional(),
+	serverUrl: z.string().optional(),
+	screenshots: z.array(screenshotDraftEntrySchema).optional(),
+	translations: z.array(chatgptTranslationSchema.extend({ tagline: z.string() })).optional()
+});
+chatgptSubmissionFormDataSchema.pick({
+	appName: true,
+	developerName: true,
+	serverUrl: true,
+	tools: true,
+	authentication: true
+});
+chatgptSubmissionFormDataSchema.pick({
+	tagline: true,
+	description: true,
+	category: true,
+	testCases: true,
+	negativeTestCases: true,
+	toolJustifications: true
+}).extend({ tagline: clampStringField(chatgptSubmissionFormDataSchema.shape.tagline) });
+const claudeCategorySchema = z.enum([
+	"Productivity",
+	"Communication",
+	"Data & Analytics",
+	"Development tools",
+	"Financial Services",
+	"Consumer Health",
+	"Health & Life Sciences",
+	"Media & Entertainment",
+	"Commerce & Shopping",
+	"Legal",
+	"Sales and marketing",
+	"Creative",
+	"Nonprofit",
+	"Education",
+	"Other"
+]);
+const claudeCategoryDescription = `The categories used to filter connectors in the directory UI. Select up to 5 that best describe your connector.`;
+const claudeReadWriteCapabilitiesSchema = z.enum([
+	"read_only",
+	"write_only",
+	"read_write"
+]);
+const claudeAuthenticationSchema = z.enum([
+	"oauth_dcr",
+	"oauth_cimd",
+	"oauth_anthropic_creds",
+	"custom_connection",
+	"none"
+]);
+const claudeApiOwnershipSchema = z.enum([
+	"first_party",
+	"proxied",
+	"third_party"
+]);
+const claudeYesNoOtherSchema = z.union([z.boolean(), z.object({ other: z.string() })]);
+const claudePolicyAcknowledgementSchema = z.enum([
+	"I have read and understand the MCP Directory developer guidelines.",
+	"My server calls our own first-party APIs (or APIs we legitimately proxy with permission).",
+	"My connector does not transfer money, cryptocurrency, or other financial assets on a user's behalf.",
+	"My connector does not use AI models to generate images, video, or audio.",
+	"Tool descriptions contain no instructions about model behavior, other tools, or external instruction sources, and no hidden or encoded text.",
+	"My connector does not collect conversation data beyond what is needed for its function.",
+	"Public documentation for this connector will be live by the publish date."
+]);
+/** Field order mirrors the claude.ai directory submission wizard (`claude.ai/admin-settings/directory/submissions/new`), grouped by step; keep it in sync with the wizard. */
+const claudeSubmissionFormDataSchema = z.object({
+	serverUrl: z.url().describe(`The full https:// URL where your MCP server is hosted and reachable. In the claude.ai wizard this is read live
+from the custom connector you select — the connection is used to verify the URL and the tool list at submission time.
+The server must be publicly accessible without VPN or whitelisting.`),
+	name: z.string().max(100).describe(`The public display name for your connector as it appears in the directory. Use your brand/product name. You must
+own or have the right to use this name. Max 100 characters.`),
+	slug: z.string().max(50).regex(/^[a-z0-9-]+$/).describe(`URL-safe identifier for your connector's directory page. Lowercase letters, numbers, and hyphens only.
+PERMANENT after submission — it cannot be changed. Pre-filled from the name. Max 50 characters.`),
+	oneLiner: z.string().max(200).describe(`A short tagline shown below your connector name in the directory listing. Max 200 characters. Avoid generic
+phrases like 'The best MCP server for...'. Example: 'Manage tasks and projects in Linear'.`),
+	description: z.string().max(2e3).describe(`A description of what your connector does and its key features, shown on the connector's detail page in
+claude.ai. Write it from a user perspective and be specific. Max 2000 characters.`),
+	categories: z.array(claudeCategorySchema).max(5).describe(claudeCategoryDescription),
+	iconUrl: z.url().optional().describe(`Optional custom icon for the directory listing — a square SVG. By default the favicon from your MCP URL is used
+(recommended); upload a custom icon only to override it.`),
+	documentation: z.url().describe(`A public URL pointing to documentation that helps users understand and use your connector. Must be publicly
+accessible without login. IT admins often review these when deciding whether to approve a server. Required to be live
+by your publish date.`),
+	support: supportChannelSchema.describe(`A support URL or email address where users can get help with your connector. Displayed in the directory listing and
+used to notify you of security or compliance issues, so make sure it's actively monitored.`),
+	privacyPolicy: z.url().describe(`URL to your privacy policy. Mandatory and displayed in the directory listing. Must be publicly accessible and cover
+what data you collect, how you use and store it, and whether you share it with third parties.`),
+	screenshots: z.array(screenshotEntrySchema).optional().describe(`Carousel images shown on your connector's directory page (PNG). Each is paired with the user prompt that produced
+it. This is editable on the directory page only after the connector is submitted — optional here so you can prepare it.`),
+	primaryUseCases: z.string().describe(`Describe the main tasks users will accomplish with this connector, and include a few example prompts a user might
+type. These may be shown publicly but are primarily used for internal review — reviewers test your server using them.`),
+	connectionRequirements: z.string().describe(`What accounts, permissions, or setup a user needs before connecting (e.g. 'Requires a paid Acme account with admin
+permissions'). If there are genuinely no special requirements, say so explicitly.`),
+	readWriteCapabilities: claudeReadWriteCapabilitiesSchema.describe(`What your server can do:
+• 'read_only': retrieves data but never modifies it.
+• 'write_only': creates or modifies data but does not read it.
+• 'read_write': both retrieves and modifies data (most common).`),
+	companyName: z.string().describe("The company or organization behind this connector — its legal name or publicly known product name."),
+	companyWebsite: z.url().describe("The company's main website URL, e.g. https://example.com."),
+	primaryContactName: z.string().describe("Full name of the person Anthropic should contact about this submission. Receives review feedback and follow-up questions."),
+	primaryContactEmail: z.email().describe("Email for the primary contact (pre-filled from the Claude account). Anthropic uses this to communicate about your submission."),
+	primaryContactRole: z.string().optional().describe("The primary contact's role at the company (e.g. 'Engineer', 'Product Manager'). Optional."),
+	anthropicPointOfContact: z.string().optional().describe("If you've been working with someone at Anthropic, their name or email. Optional, can expedite review."),
+	authentication: claudeAuthenticationSchema.describe(`How users authenticate with your server:
+• 'oauth_dcr': OAuth 2.0 + Dynamic Client Registration (RFC 7591) — clients register themselves.
+• 'oauth_cimd': OAuth 2.0 + Client ID Metadata Document — a published client_id metadata document.
+• 'oauth_anthropic_creds': OAuth 2.0 with Anthropic-held client credentials (a static client_id, and secret if needed).
+• 'custom_connection': users supply their own URL or client details at connection time (e.g. Snowflake).
+• 'none': no authentication (authless) — anyone can connect and call tools without credentials.`),
+	partialAuth: z.boolean().optional().describe("Whether some tools return 401 and prompt for auth on demand while the server otherwise starts authless (partial auth)."),
+	apiOwnership: claudeApiOwnershipSchema.describe(`How your connector relates to the API it calls:
+• 'first_party': the MCP server calls your own production APIs.
+• 'proxied': calls go to a third-party API you're authorized to integrate (e.g. a Zapier-style integration).
+• 'third_party': calls a third-party API you don't control — typically blocks listing; explain in 'additionalNotes'.`),
+	personalHealthData: claudeYesNoOtherSchema.describe(`Whether this connector accesses, processes, or stores personal health information.
+No → false, Yes → true, or { other: explanation } when it depends on configuration.`),
+	sponsoredContent: claudeYesNoOtherSchema.describe(`Whether this connector surfaces sponsored, promoted, or advertising content (prohibited in directory connectors).
+No → false, Yes → true, or { other: explanation }.`),
+	testInstructions: z.string().optional().describe(`Clear test-account setup and access instructions for reviewers: every link, credential, and step needed to access
+the MCP server autonomously. For accounts that need to be populated, provide test credentials granting access to a
+fully populated account.`),
+	selfTested: z.boolean().optional().describe("Confirmation that you have run every tool via MCP Inspector or as a custom connector in Claude."),
+	policyAcknowledgements: z.array(claudePolicyAcknowledgementSchema).describe(`Anthropic directory policy acknowledgements. All items must be acknowledged before the claude.ai wizard allows
+submission. Each is an attestation you are legally agreeing to by submitting.`),
+	additionalNotes: z.string().optional().describe("Anything else the review team should know about your connector. Optional.")
+});
+const claudeSubmissionDraftSchema = claudeSubmissionFormDataSchema.partial().extend({
+	serverUrl: z.string().optional(),
+	name: z.string().optional(),
+	slug: z.string().optional(),
+	oneLiner: z.string().optional(),
+	description: z.string().optional(),
+	iconUrl: z.string().optional(),
+	documentation: z.string().optional(),
+	support: z.string().optional(),
+	privacyPolicy: z.string().optional(),
+	companyWebsite: z.string().optional(),
+	primaryContactEmail: z.string().optional(),
+	categories: z.array(claudeCategorySchema).optional(),
+	screenshots: z.array(screenshotDraftEntrySchema).optional()
+});
+claudeSubmissionFormDataSchema.pick({
+	serverUrl: true,
+	name: true,
+	slug: true,
+	companyName: true,
+	primaryContactEmail: true,
+	primaryContactName: true,
+	readWriteCapabilities: true,
+	authentication: true,
+	apiOwnership: true,
+	personalHealthData: true
+}).extend({
+	connectionRequirements: claudeSubmissionFormDataSchema.shape.connectionRequirements.optional(),
+	testInstructions: claudeSubmissionFormDataSchema.shape.testInstructions.optional()
+});
+/** Loose shape returned by AI generation for Claude narrative fields; transforms live here so generation leniency stays colocated with the Claude contract. */
+const claudeAiGeneratedFormDataRawSchema = z.object({
+	oneLiner: claudeSubmissionFormDataSchema.shape.oneLiner,
+	description: claudeSubmissionFormDataSchema.shape.description,
+	categories: z.array(claudeCategorySchema).describe(claudeCategoryDescription),
+	primaryUseCases: claudeSubmissionFormDataSchema.shape.primaryUseCases
+});
+claudeAiGeneratedFormDataRawSchema.extend({
+	oneLiner: clampStringField(claudeSubmissionFormDataSchema.shape.oneLiner),
+	categories: claudeAiGeneratedFormDataRawSchema.shape.categories.transform((categories) => categories.slice(0, 5))
+});
+const submissionMetaFieldsSchema = z.object({
+	id: z.string(),
+	environmentId: z.string(),
+	auditId: z.string().nullable(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+});
+const claudeSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
+	platform: z.literal("claudeai"),
+	formData: claudeSubmissionDraftSchema
+});
+const chatgptSubmissionSchemaInternal = submissionMetaFieldsSchema.extend({
+	platform: z.literal("chatgpt"),
+	formData: chatgptSubmissionDraftSchema
+});
+z.discriminatedUnion("platform", [claudeSubmissionSchemaInternal, chatgptSubmissionSchemaInternal]);
+z.union([claudeSubmissionDraftSchema, chatgptSubmissionDraftSchema]);
+z.literal([
+	100,
+	75,
+	50
+]);
+const subscriptionPlanSchema = z.enum([
+	"pro",
+	"business",
+	"enterprise"
+]);
+z.object({ plan: subscriptionPlanSchema.nullable() });
+const customerCreditsSchema = z.object({
+	balanceInCents: z.number(),
+	expiresAt: z.number().nullable(),
+	currency: z.string()
+});
+const partnerDiscountSchema = z.object({ endsAt: z.number() });
+z.object({
+	customerCredits: customerCreditsSchema.nullable(),
+	partnerDiscount: partnerDiscountSchema.nullable()
+});
+const metricsQueueEventSchema = z.object({
+	ts: z.number().int(),
+	method: z.string(),
+	tool: z.string().nullable(),
+	client: z.string(),
+	sessionId: z.string().nullable(),
+	durationMs: z.number().int(),
+	outputTokens: z.number().int().nullable(),
+	errorType: z.enum([
+		"mcp_error",
+		"tool_error",
+		"timeout"
+	]).nullable(),
+	errorCode: z.number().int().nullable()
+});
+z.object({
+	v: z.literal(1),
+	envId: z.string(),
+	events: z.array(metricsQueueEventSchema)
+});
+z.object({ v: z.number() });
+const telemetrySignalSchema = z.enum([
+	"logs",
+	"metrics",
+	"traces"
+]);
+const otlpProtocolSchema = z.enum(["http/protobuf", "http/json"]);
+const otlpEndpointSchema = z.string().trim().min(1).max(2048);
+const OTLP_HEADER_VALUE_MAX_LENGTH = 2048;
+const otlpHeaderNameSchema = z.string().trim().min(1, "Enter a header name").max(128).regex(/^[A-Za-z0-9!#$%&'*+\-.^_`|~]+$/, "Use letters, digits and !#$%&'*+-.^_`|~ only");
+const otlpHeaderValueSchema = z.string().trim().max(OTLP_HEADER_VALUE_MAX_LENGTH).refine((value) => !/[\r\n]/.test(value), "Line breaks are not allowed in a header value");
+const telemetryDestinationHeaderSchema = z.object({
+	id: z.string(),
+	name: otlpHeaderNameSchema,
+	value: otlpHeaderValueSchema,
+	isSecret: z.boolean()
+});
+const otlpPushFailureReasonSchema = z.enum([
+	"credentials",
+	"wrong-path",
+	"wrong-protocol",
+	"invalid-payload",
+	"partial-rejection",
+	"blocked-target",
+	"timeout",
+	"unreachable",
+	"receiver-error",
+	"unexpected-status"
+]);
+const telemetryDestinationStatusSchema = z.enum(["active", "suspended"]);
+z.object({
+	id: z.string(),
+	signal: telemetrySignalSchema,
+	endpoint: otlpEndpointSchema,
+	protocol: otlpProtocolSchema,
+	headers: z.array(telemetryDestinationHeaderSchema),
+	status: telemetryDestinationStatusSchema,
+	lastFailureReason: otlpPushFailureReasonSchema.nullable()
+});
+//#endregion
+//#region src/auth-scope.ts
+/** Accepts an API key or OAuth access token (default for most routes). */
+const AUTH_SCOPE_ANY = "any";
+/** Requires a user OAuth access token; API keys are not accepted. */
+const AUTH_SCOPE_USER = "user";
+//#endregion
+//#region src/schemas.ts
+const RESERVED_KEYS = [
+	"_HANDLER",
+	"_X_AMZN_TRACE_ID",
+	"AWS_DEFAULT_REGION",
+	"AWS_REGION",
+	"AWS_EXECUTION_ENV",
+	"AWS_LAMBDA_FUNCTION_NAME",
+	"AWS_LAMBDA_FUNCTION_MEMORY_SIZE",
+	"AWS_LAMBDA_FUNCTION_VERSION",
+	"AWS_LAMBDA_INITIALIZATION_TYPE",
+	"AWS_LAMBDA_LOG_GROUP_NAME",
+	"AWS_LAMBDA_LOG_STREAM_NAME",
+	"AWS_ACCESS_KEY",
+	"AWS_ACCESS_KEY_ID",
+	"AWS_SECRET_ACCESS_KEY",
+	"AWS_SESSION_TOKEN",
+	"AWS_LAMBDA_RUNTIME_API",
+	"LAMBDA_TASK_ROOT",
+	"LAMBDA_RUNTIME_DIR",
+	"START_COMMAND",
+	"ENVIRONMENT_ID",
+	"PROJECT_BUILD_IMAGES_REPOSITORY_URI",
+	"ENVIRONMENT_LAMBDA_FUNCTION_ARN",
+	"SOURCE_REPOSITORY",
+	"SOURCE_BRANCH",
+	"SOURCE_REPOSITORY_CREDENTIALS",
+	"RUNTIME",
+	"ROOT_DIRECTORY",
+	"BUILD_ARG_INSTALL_COMMAND",
+	"BUILD_ARG_BUILD_COMMAND",
+	"BUILD_ARG_BUILD_OUTPUT_DIR",
+	"BUILD_ARG_START_COMMAND",
+	"ALPIC_HOST",
+	"ALPIC_CUSTOM_DOMAINS",
+	"ALPIC_INTENT_META_KEY",
+	"ALPIC_FEEDBACK_META_KEY",
+	"ALPIC_EVENTS_META_KEY",
+	"ALPIC_IDENTIFY_META_KEY"
+];
+const environmentVariableSchema = z.object({
+	key: z.string().min(2, "Key must be at least 2 characters").regex(/^[a-zA-Z]([a-zA-Z0-9_])+$/, "Key must start with a letter and contain only letters, numbers, and underscores").refine((key) => !RESERVED_KEYS.includes(key), "This key is reserved and cannot be used as an environment variable key"),
+	value: z.string().min(1, "Value is required"),
+	isSecret: z.boolean().default(false)
+});
+const environmentVariablesSchema = z.array(environmentVariableSchema);
+const updateEnvironmentVariableSchema = environmentVariableSchema.partial({
+	value: true,
+	isSecret: true
+});
+const buildSettingsSchema = z.object({
+	installCommand: z.string().optional(),
+	buildCommand: z.string().optional(),
+	buildOutputDir: z.string().optional(),
+	startCommand: z.string().optional()
+});
+const playgroundHeaderSchema = z.object({
+	name: z.string().min(1).max(100),
+	description: z.string().max(200),
+	isRequired: z.boolean().default(false),
+	isSecret: z.boolean().default(false)
+});
+const playgroundExamplePromptSchema = z.object({
+	title: z.string().min(1).max(100),
+	prompt: z.string().min(1).max(500)
+});
 const serverFieldsSchema = z.object({
 	$schema: z.string(),
 	name: z.string(),
@@ -148,6 +1606,14 @@ const serverFieldsSchema = z.object({
 });
 //#endregion
 //#region src/api.contract.ts
+const isValidIanaTimeZone = (timeZone) => {
+	try {
+		new Intl.DateTimeFormat("en-US", { timeZone });
+		return true;
+	} catch {
+		return false;
+	}
+};
 const deploymentStatusSchema = z.enum([
 	"ongoing",
 	"deployed",
@@ -176,21 +1642,20 @@ const deploymentSchema = z.object({
 	isCurrent: z.boolean(),
 	deploymentPageUrl: z.url().nullable()
 });
-const isValidLogTimeInput = (value) => {
+const isValidTimeInput = (value) => {
 	if (ms(value) !== void 0) return true;
 	return !Number.isNaN(new Date(value).getTime());
 };
-const createEnvironmentContractV1 = oc.route({
+const timeInputSchema = z.string().refine(isValidTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." });
+const base = oc.errors({ BAD_REQUEST: {} });
+const createEnvironmentContractV1 = base.route({
 	path: "/v1/environments",
 	method: "POST",
 	summary: "Create an environment",
 	description: "Create an environment for a project",
 	tags: ["environments"],
 	successDescription: "The environment has been created successfully"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	projectId: z.string().describe("The ID of the project to create the environment for"),
 	name: z.string().min(1).describe("The name of the environment"),
 	sourceBranch: z.string().min(1).describe("The branch used to build the environment"),
@@ -199,11 +1664,11 @@ const createEnvironmentContractV1 = oc.route({
 	id: z.string(),
 	name: z.string(),
 	sourceBranch: z.string().nullable().describe("The branch used to build the environment"),
-	urls: z.array(z.string().url()).describe("The URLs of the MCP server"),
+	urls: z.array(z.url()).describe("The URLs of the MCP server"),
 	createdAt: z.coerce.date(),
 	projectId: z.string().describe("The ID of the project the environment belongs to")
 }));
-const getEnvironmentContractV1 = oc.route({
+const getEnvironmentContractV1 = base.route({
 	path: "/v1/environments/{environmentId}",
 	method: "GET",
 	summary: "Get an environment",
@@ -215,7 +1680,7 @@ const getEnvironmentContractV1 = oc.route({
 	name: z.string(),
 	sourceBranch: z.string().nullable(),
 	mcpServerUrl: z.string(),
-	domains: z.array(z.url()),
+	domains: z.array(z.hostname()),
 	createdAt: z.coerce.date(),
 	projectId: z.string()
 }));
@@ -260,7 +1725,7 @@ const projectOutputSchema = z.object({
 	productionEnvironment: productionEnvironmentSchema.nullable(),
 	environments: z.array(environmentSchema)
 });
-const getProjectContractV1 = oc.route({
+const getProjectContractV1 = base.route({
 	path: "/v1/projects/{projectId}",
 	method: "GET",
 	summary: "Get a project",
@@ -268,15 +1733,15 @@ const getProjectContractV1 = oc.route({
 	tags: ["projects"],
 	successDescription: "The project details"
 }).errors({ NOT_FOUND: {} }).input(z.object({ projectId: z.string().describe("The ID of the project") })).output(projectOutputSchema);
-const listProjectsContractV1 = oc.route({
+const listProjectsContractV1 = base.route({
 	path: "/v1/projects",
 	method: "GET",
 	summary: "List projects",
 	description: "List all projects for a team",
 	tags: ["projects"],
 	successDescription: "The list of projects"
-}).input(z.object({ teamId: z.string().optional() }).optional()).output(z.array(projectOutputSchema));
-const createProjectContractV1 = oc.route({
+}).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.array(projectOutputSchema));
+const createProjectContractV1 = base.route({
 	path: "/v1/projects",
 	method: "POST",
 	summary: "Create a project",
@@ -285,7 +1750,7 @@ const createProjectContractV1 = oc.route({
 	successDescription: "The project has been created successfully"
 }).errors({
 	NOT_FOUND: {},
-	BAD_REQUEST: {}
+	FORBIDDEN: {}
 }).input(z.object({
 	teamId: z.string().optional(),
 	name: z.string().trim().min(1).max(100),
@@ -325,7 +1790,7 @@ const environmentVariableOutputSchema = z.object({
 	isSecret: z.boolean(),
 	createdAt: z.coerce.date()
 });
-const listEnvironmentVariablesContractV1 = oc.route({
+const listEnvironmentVariablesContractV1 = base.route({
 	path: "/v1/environments/{environmentId}/environment-variables",
 	method: "GET",
 	summary: "List environment variables",
@@ -333,37 +1798,31 @@ const listEnvironmentVariablesContractV1 = oc.route({
 	tags: ["environments"],
 	successDescription: "The list of environment variables"
 }).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.array(environmentVariableOutputSchema));
-const createEnvironmentVariablesContractV1 = oc.route({
+const createEnvironmentVariablesContractV1 = base.route({
 	path: "/v1/environments/{environmentId}/environment-variables",
 	method: "POST",
 	summary: "Add environment variables",
 	description: "Add one or more environment variables to an environment",
 	tags: ["environments"],
 	successDescription: "The environment variables have been added successfully"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	environmentId: z.string().describe("The ID of the environment"),
 	environmentVariables: environmentVariablesSchema
 })).output(z.object({ success: z.literal(true) }));
-const updateEnvironmentVariableContractV1 = oc.route({
+const updateEnvironmentVariableContractV1 = base.route({
 	path: "/v1/environment-variables/{environmentVariableId}",
 	method: "PATCH",
 	summary: "Update an environment variable",
 	description: "Update an environment variable by ID",
 	tags: ["environments"],
 	successDescription: "The environment variable has been updated successfully"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	environmentVariableId: z.string().describe("The ID of the environment variable"),
 	key: environmentVariableSchema.shape.key,
 	value: environmentVariableSchema.shape.value.optional(),
-	isSecret: environmentVariableSchema.shape.isSecret
+	isSecret: environmentVariableSchema.shape.isSecret.optional()
 })).output(z.object({ success: z.literal(true) }));
-const deleteEnvironmentVariableContractV1 = oc.route({
+const deleteEnvironmentVariableContractV1 = base.route({
 	path: "/v1/environment-variables/{environmentVariableId}",
 	method: "DELETE",
 	summary: "Delete an environment variable",
@@ -371,15 +1830,15 @@ const deleteEnvironmentVariableContractV1 = oc.route({
 	tags: ["environments"],
 	successDescription: "The environment variable has been deleted successfully"
 }).errors({ NOT_FOUND: {} }).input(z.object({ environmentVariableId: z.string().describe("The ID of the environment variable") })).output(z.object({ success: z.literal(true) }));
-const deleteProjectContractV1 = oc.route({
-	path: "/v1/projects/:projectId",
+const deleteProjectContractV1 = base.route({
+	path: "/v1/projects/{projectId}",
 	method: "DELETE",
 	summary: "Delete a project",
 	description: "Delete a project and all its environments",
 	tags: ["projects"],
 	successDescription: "The project has been deleted successfully"
 }).errors({ NOT_FOUND: {} }).input(z.object({ projectId: z.string().describe("The ID of the project") })).output(z.object({ success: z.literal(true) }));
-const updateProjectContractV1 = oc.route({
+const updateProjectContractV1 = base.route({
 	path: "/v1/projects/{projectId}",
 	method: "PATCH",
 	summary: "Update a project",
@@ -388,13 +1847,13 @@ const updateProjectContractV1 = oc.route({
 	successDescription: "The project has been updated successfully"
 }).errors({
 	NOT_FOUND: {},
-	BAD_REQUEST: {}
+	FORBIDDEN: {}
 }).input(z.object({
 	projectId: z.string().describe("The ID of the project"),
 	name: z.string().min(1).max(100).optional().describe("The new name for the project"),
 	sourceRepository: z.string().nullable().optional().describe("The source repository to connect to the project")
 })).output(projectOutputSchema);
-const deployEnvironmentContractV1 = oc.route({
+const deployEnvironmentContractV1 = base.route({
 	path: "/v1/environments/{environmentId}/deploy",
 	method: "POST",
 	summary: "Deploy an environment",
@@ -403,24 +1862,25 @@ const deployEnvironmentContractV1 = oc.route({
 	successDescription: "The environment has been deployed successfully"
 }).errors({
 	NOT_FOUND: {},
-	BAD_REQUEST: {}
+	CONFLICT: {}
 }).input(z.object({
 	environmentId: z.string().describe("The ID of the environment to deploy"),
-	token: z.string().describe("The token to identify the source archive").optional()
+	token: z.string().describe("The token to identify the source archive").optional(),
+	settings: buildSettingsSchema.extend({ transport: transportSchema }).optional().describe("Project settings detected by the client from the source. When provided, the server skips downloading and extracting the source archive to detect them.")
 })).output(deploymentSchema);
-const uploadDeploymentArtifactContractV1 = oc.route({
+const uploadDeploymentArtifactContractV1 = base.route({
 	path: "/v1/deployments/upload",
 	method: "POST",
 	summary: "Upload deployment artifacts",
 	description: "Return a presigned S3 URL to upload a deployment artifact",
 	tags: ["deployments"],
 	successDescription: "The presigned upload URL has been generated successfully"
-}).input(z.object({ teamId: z.string().optional() }).optional()).output(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().optional() }).optional()).output(z.object({
 	uploadUrl: z.url().describe("Presigned S3 URL to upload the source archive with HTTP PUT"),
 	token: z.string().describe("Token to identify the source archive"),
 	expiresAt: z.coerce.date().describe("Expiration date of the presigned URL")
 }));
-const listDeploymentsContractV1 = oc.route({
+const listDeploymentsContractV1 = base.route({
 	path: "/v1/projects/{projectId}/deployments",
 	method: "GET",
 	summary: "List project deployments",
@@ -432,7 +1892,7 @@ const listDeploymentsContractV1 = oc.route({
 	status: z.array(deploymentStatusSchema).optional().describe("Filter by one or more statuses"),
 	environmentId: z.string().optional().describe("Filter by environment ID")
 })).output(z.array(deploymentSchema));
-const getDeploymentContractV1 = oc.route({
+const getDeploymentContractV1 = base.route({
 	path: "/v1/deployments/{deploymentId}",
 	method: "GET",
 	summary: "Get a deployment",
@@ -440,20 +1900,32 @@ const getDeploymentContractV1 = oc.route({
 	tags: ["deployments"],
 	successDescription: "The deployment details"
 }).errors({ NOT_FOUND: {} }).input(z.object({ deploymentId: z.string().describe("The ID of the deployment") })).output(deploymentSchema);
-const getLogsContractV1 = oc.route({
+const logEntrySchema = z.object({
+	timestamp: z.coerce.date(),
+	type: z.enum([
+		"START",
+		"END",
+		"INFO",
+		"ERROR",
+		"WARNING",
+		"DEBUG"
+	]),
+	requestId: z.string(),
+	content: z.string().optional(),
+	method: z.string().optional(),
+	durationInMs: z.number().optional()
+});
+const getLogsContractV1 = base.route({
 	path: "/v1/environments/{environmentId}/logs",
 	method: "GET",
 	summary: "Get logs",
 	description: "Get logs for an environment",
 	tags: ["environments"],
 	successDescription: "The logs"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	environmentId: z.string().describe("The ID of the environment"),
-	since: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
-	until: z.string().refine(isValidLogTimeInput, { message: "Invalid time. Use relative (1h, 30m, 2d) or ISO 8601 format." }).optional().describe("End time — ISO 8601 or relative"),
+	since: timeInputSchema.optional().describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
+	until: timeInputSchema.optional().describe("End time — ISO 8601 or relative"),
 	limit: z.coerce.number().int().min(1).max(1e3).default(1e3).describe("Maximum number of log entries to return."),
 	level: z.array(z.enum([
 		"INFO",
@@ -464,24 +1936,28 @@ const getLogsContractV1 = oc.route({
 	search: z.string().optional().describe("Filter pattern to search for in log content"),
 	nextToken: z.string().optional().describe("Pagination token from a previous response")
 })).output(z.object({
-	logs: z.array(z.object({
-		timestamp: z.coerce.date(),
-		type: z.enum([
-			"START",
-			"END",
-			"INFO",
-			"ERROR",
-			"WARNING",
-			"DEBUG"
-		]),
-		requestId: z.string(),
-		content: z.string().optional(),
-		method: z.string().optional(),
-		durationInMs: z.number().optional()
-	})),
+	logs: z.array(logEntrySchema),
 	nextToken: z.string().nullable()
 }));
-const getDeploymentLogsContractV1 = oc.route({
+const getLatestLogsContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/latest-logs",
+	method: "GET",
+	summary: "Get latest logs",
+	description: "Get the N most recent logs for an environment",
+	tags: ["environments"],
+	successDescription: "The latest logs"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	limit: z.coerce.number().int().min(1).max(1e3).default(100).describe("Number of most recent log entries to return"),
+	level: z.array(z.enum([
+		"INFO",
+		"ERROR",
+		"WARNING",
+		"DEBUG"
+	])).optional().describe("Filter by log level"),
+	search: z.string().optional().describe("Filter pattern to search for in log content")
+})).output(z.object({ logs: z.array(logEntrySchema) }));
+const getDeploymentLogsContractV1 = base.route({
 	path: "/v1/deployments/{deploymentId}/logs",
 	method: "GET",
 	summary: "Get deployment logs",
@@ -508,22 +1984,19 @@ const analyticsTimeSeriesSchema = z.object({
 	output_token_mean: z.array(analyticsDataPointSchema),
 	task_count: z.array(analyticsDataPointSchema)
 });
-const getProjectAnalyticsContractV1 = oc.route({
+const getProjectAnalyticsContractV1 = base.route({
 	path: "/v1/analytics/{projectId}",
 	method: "GET",
 	summary: "Get project analytics",
 	description: "Get analytics data for a project over a time range",
 	tags: ["analytics"],
 	successDescription: "The project analytics data"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	projectId: z.string().describe("The ID of the project"),
 	startTimestamp: z.coerce.number().describe("Start timestamp in milliseconds"),
 	endTimestamp: z.coerce.number().describe("End timestamp in milliseconds"),
 	timeZone: z.string().describe("IANA timezone (e.g. Europe/Paris)")
-}).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp > 0, { message: "End date must be after start date" }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp <= 744 * 60 * 60 * 1e3, { message: "Date range must be less than 1 month" }).refine(({ timeZone }) => Intl.supportedValuesOf("timeZone").includes(timeZone), { message: "Time zone must be a valid IANA timezone" })).output(z.object({
+}).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp > 0, { message: "End date must be after start date" }).refine(({ startTimestamp, endTimestamp }) => endTimestamp - startTimestamp <= 26784e5, { message: "Date range must be less than 1 month" }).refine(({ timeZone }) => isValidIanaTimeZone(timeZone), { message: "Time zone must be a valid IANA timezone" })).output(z.object({
 	metadata: z.object({
 		startTimestamp: z.number(),
 		endTimestamp: z.number(),
@@ -533,7 +2006,132 @@ const getProjectAnalyticsContractV1 = oc.route({
 	}),
 	timeSeries: analyticsTimeSeriesSchema
 }));
-const listTeamsContractV1 = oc.route({
+const paginatedInsightsInputShape = {
+	environmentId: z.string().describe("The ID of the environment"),
+	since: timeInputSchema.default("7d").describe("Start time — ISO 8601 (2024-01-01T00:00:00Z) or relative (1h, 30m, 2d)"),
+	until: timeInputSchema.optional().describe("End time — ISO 8601 or relative"),
+	limit: z.coerce.number().int().min(1).max(200).default(50),
+	offset: z.coerce.number().int().min(0).default(0),
+	search: z.string().trim().min(1).max(200).optional()
+};
+const listIntentsContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intents",
+	method: "GET",
+	summary: "List intents",
+	description: "List grouped user intents for an environment over a time range",
+	tags: ["insights"],
+	successDescription: "The grouped user intents"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	...paginatedInsightsInputShape,
+	tools: z.array(z.string().trim().min(1)).min(1).max(100).optional(),
+	clientIds: z.array(z.string().min(1)).min(1).max(100).optional(),
+	categoryIds: z.array(z.string().trim().min(1)).min(1).max(100).optional(),
+	sortDir: z.enum(["asc", "desc"]).default("desc")
+})).output(z.object({
+	intents: z.array(z.object({
+		id: z.string(),
+		intentIds: z.array(z.string()).min(1),
+		environmentId: z.string(),
+		message: z.string(),
+		toolName: z.string(),
+		createdAt: z.coerce.date(),
+		occurrenceCount: z.number().int().positive(),
+		clientName: z.string().nullable(),
+		clientId: z.string().nullable(),
+		categories: z.array(z.object({
+			id: z.string(),
+			name: z.string(),
+			color: intentCategoryColorSchema
+		}))
+	})),
+	totalCount: z.number().int().nonnegative()
+}));
+const listFeedbacksContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/feedbacks",
+	method: "GET",
+	summary: "List feedbacks",
+	description: "List user feedback for an environment over a time range",
+	tags: ["insights"],
+	successDescription: "The user feedback"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	...paginatedInsightsInputShape,
+	clientIds: z.array(z.string().min(1)).min(1).max(100).optional()
+})).output(z.object({
+	feedbacks: z.array(feedbackSchema.extend({ clientId: z.string().nullable() })),
+	totalCount: z.number().int().nonnegative()
+}));
+const intentCategoryNameSchema = z.string().trim().min(1).max(100).describe("The category name");
+const categorizableIntentIdsSchema = z.array(z.string().trim().min(1)).min(1).max(100).describe("IDs of the intents to categorize");
+const listIntentCategoriesContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories",
+	method: "GET",
+	summary: "List intent categories",
+	description: "List intent categories for an environment, including how many intents each category is linked to",
+	tags: ["insights"],
+	successDescription: "The intent categories"
+}).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(z.array(intentCategorySummarySchema));
+const createIntentCategoryContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories",
+	method: "POST",
+	summary: "Create an intent category",
+	description: "Create an intent category, optionally linking it to existing intents",
+	tags: ["insights"],
+	successDescription: "The created intent category"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	name: intentCategoryNameSchema,
+	color: intentCategoryColorSchema.optional().describe("The category color; derived from the name when omitted"),
+	intentIds: categorizableIntentIdsSchema.optional().describe("IDs of intents to link to the new category")
+})).output(intentCategorySchema);
+const updateIntentCategoryContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories/{categoryId}",
+	method: "PATCH",
+	summary: "Update an intent category",
+	description: "Rename or recolor an intent category",
+	tags: ["insights"],
+	successDescription: "The updated intent category"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	categoryId: z.string().describe("The ID of the category"),
+	name: intentCategoryNameSchema.optional(),
+	color: intentCategoryColorSchema.optional().describe("The category color")
+}).refine(({ name, color }) => name !== void 0 || color !== void 0, { message: "At least one of name or color must be provided" })).output(intentCategorySchema);
+const deleteIntentCategoryContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories/{categoryId}",
+	method: "DELETE",
+	summary: "Delete an intent category",
+	description: "Delete an intent category; its intents are unlinked but not deleted",
+	tags: ["insights"],
+	successDescription: "The intent category has been deleted successfully"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	categoryId: z.string().describe("The ID of the category")
+})).output(z.object({ success: z.literal(true) }));
+const linkIntentCategoryContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories/{categoryId}/link",
+	method: "POST",
+	summary: "Link an intent category",
+	description: "Link an intent category to intents; already linked intents are ignored",
+	tags: ["insights"],
+	successDescription: "The intents have been linked successfully"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	categoryId: z.string().describe("The ID of the category"),
+	intentIds: categorizableIntentIdsSchema
+})).output(z.object({ success: z.literal(true) }));
+const unlinkIntentCategoryContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/intent-categories/{categoryId}/unlink",
+	method: "POST",
+	summary: "Unlink an intent category",
+	description: "Unlink an intent category from intents; intents without the category are ignored",
+	tags: ["insights"],
+	successDescription: "The intents have been unlinked successfully"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	categoryId: z.string().describe("The ID of the category"),
+	intentIds: categorizableIntentIdsSchema
+})).output(z.object({ success: z.literal(true) }));
+const listTeamsContractV1 = base.route({
 	path: "/v1/teams",
 	method: "GET",
 	summary: "List teams",
@@ -546,28 +2144,40 @@ const listTeamsContractV1 = oc.route({
 	createdAt: z.coerce.date(),
 	hasStripeAccount: z.boolean()
 })));
-const getTunnelTicketContractV1 = oc.route({
+const getTeamUsageContractV1 = base.route({
+	path: "/v1/teams/{teamId}/usage",
+	method: "GET",
+	summary: "Get team usage",
+	description: "Get the MCP request usage of a team for its current billing window. A team that has made no request in the window reports zero.",
+	tags: ["teams"],
+	successDescription: "The current billing window usage"
+}).errors({ NOT_FOUND: {} }).input(z.object({ teamId: z.string().describe("The ID of the team") })).output(z.object({
+	teamId: z.string(),
+	plan: subscriptionPlanSchema.nullable().describe("The plan in force for the window, null on the Free plan"),
+	periodStart: z.coerce.date().describe("Start of the current billing window"),
+	periodEnd: z.coerce.date().describe("End of the current billing window"),
+	requestCount: z.number().int().describe("MCP requests settled during the current billing window"),
+	includedRequests: z.number().int().nullable().describe("Requests included in the plan for one window, null when the allowance is contract-specific")
+}));
+const getTunnelTicketContractV1 = base.route({
 	path: "/v1/tunnels/ticket",
 	method: "GET",
 	summary: "Get a tunnel ticket",
 	description: "Get a signed ticket for establishing a tunnel connection. Requires user authentication (API keys are not supported).",
 	tags: ["tunnels"],
 	successDescription: "The tunnel ticket"
-}).output(z.object({
+}).meta({ authScope: AUTH_SCOPE_USER }).errors({ FORBIDDEN: {} }).output(z.object({
 	subdomain: z.string().describe("The subdomain assigned to the user"),
 	ticket: z.string().describe("The signed tunnel ticket"),
 	tunnelHost: z.string().describe("The tunnel host to connect to")
 }));
-const publishServerContractV1 = oc.route({
+const publishServerContractV1 = base.route({
 	path: "/v1/distribution/publish",
 	method: "POST",
 	summary: "Publish a server to the MCP registry",
 	tags: ["distribution"],
 	successDescription: "The server has been published successfully"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	projectId: z.string(),
 	domain: z.string(),
 	title: z.string().min(1).max(100),
@@ -576,53 +2186,102 @@ const publishServerContractV1 = oc.route({
 	iconSrc: z.url().max(255).optional(),
 	dryRun: z.boolean().optional()
 })).output(z.object({ serverFields: serverFieldsSchema }));
-const getServerInfoContractV1 = oc.route({
+const getServerInfoContractV1 = base.route({
 	path: "/v1/distribution/get",
 	method: "GET",
 	summary: "Get server info",
 	description: "Get info about a server",
 	tags: ["distribution"],
 	successDescription: "The server info"
-}).errors({
-	NOT_FOUND: {},
-	BAD_REQUEST: {}
-}).input(z.object({
+}).errors({ NOT_FOUND: {} }).input(z.object({
 	projectId: z.string(),
 	domain: z.string()
 })).output(z.object({ serverFields: serverFieldsSchema }));
-const createBeaconContractV1 = oc.route({
-	path: "/v1/beacon/analyses",
+const playgroundServerMetadataOutputSchema = z.object({
+	name: z.string(),
+	description: z.string(),
+	headers: z.array(z.object({
+		name: z.string(),
+		description: z.string(),
+		isRequired: z.boolean(),
+		isSecret: z.boolean()
+	})),
+	examplePrompts: z.array(playgroundExamplePromptSchema)
+});
+const playgroundOutputSchema = z.object({
+	isPlaygroundEnabled: z.boolean(),
+	serverMetadata: playgroundServerMetadataOutputSchema.nullable()
+});
+const getPlaygroundContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/playground",
+	method: "GET",
+	summary: "Get playground configuration",
+	description: "Get the playground configuration for an environment",
+	tags: ["environments"],
+	successDescription: "The playground configuration"
+}).errors({ NOT_FOUND: {} }).input(z.object({ environmentId: z.string().describe("The ID of the environment") })).output(playgroundOutputSchema);
+const upsertPlaygroundContractV1 = base.route({
+	path: "/v1/environments/{environmentId}/playground",
+	method: "PUT",
+	summary: "Update playground configuration",
+	description: "Update the playground configuration for an environment. All fields are optional — only provided fields are updated.",
+	tags: ["environments"],
+	successDescription: "The updated playground configuration"
+}).errors({ NOT_FOUND: {} }).input(z.object({
+	environmentId: z.string().describe("The ID of the environment"),
+	isPlaygroundEnabled: z.boolean().optional(),
+	name: z.string().min(1).max(100).optional(),
+	description: z.string().min(1).max(500).optional(),
+	headers: z.array(playgroundHeaderSchema).optional(),
+	examplePrompts: z.array(playgroundExamplePromptSchema).max(5).optional()
+})).output(playgroundOutputSchema);
+const createBeaconContractV1 = base.route({
+	path: "/v1/beacon/audits",
 	method: "POST",
-	summary: "Create a beacon analysis",
-	description: "Analyze an MCP server for spec compliance and AI client compatibility",
+	summary: "Create a beacon audit",
+	description: "Audit an MCP server for spec compliance and AI client compatibility",
 	tags: ["beacon"],
-	successDescription: "The analysis has been created"
+	successDescription: "The audit has been created"
 }).errors({
 	NOT_FOUND: {},
-	BAD_REQUEST: {}
+	DNS_RESOLUTION_FAILED: { status: 400 }
 }).input(z.object({
-	targetUrl: z.string().url().describe("The HTTPS URL of the MCP server to analyze"),
-	teamId: z.string().optional().describe("The team ID to associate the analysis with"),
-	projectId: z.string().optional().describe("The project ID to associate the analysis with")
+	targetUrl: z.url().describe("The HTTPS URL of the MCP server to audit"),
+	teamId: z.string().optional().describe("The team ID to associate the audit with"),
+	projectId: z.string().optional().describe("The project ID to associate the audit with"),
+	excludeCategories: z.array(checkCategorySchema).optional().describe("Check categories to exclude from the audit")
 })).output(z.object({ id: z.string() }));
-const getBeaconContractV1 = oc.route({
-	path: "/v1/beacon/analyses/{analysisId}",
+const getBeaconContractV1 = base.route({
+	path: "/v1/beacon/audits/{auditId}",
 	method: "GET",
-	summary: "Get a beacon analysis",
-	description: "Get a beacon analysis by ID, including the report if completed",
+	summary: "Get a beacon audit",
+	description: "Get a beacon audit by ID, including the report if completed",
 	tags: ["beacon"],
-	successDescription: "The analysis details"
-}).errors({ NOT_FOUND: {} }).input(z.object({ analysisId: z.string().describe("The ID of the analysis") })).output(z.object({
+	successDescription: "The audit details"
+}).errors({ NOT_FOUND: {} }).input(z.object({ auditId: z.string().describe("The ID of the audit") })).output(z.object({
 	id: z.string(),
 	targetUrl: z.string(),
-	status: analysisStatusSchema,
+	status: auditStatusSchema,
 	durationMs: z.number().nullable(),
 	createdAt: z.coerce.date(),
-	report: auditReportSchema.nullable()
+	report: auditReportWithScreenshotsSchema.nullable()
 }));
 const contract = {
-	teams: { list: { v1: listTeamsContractV1 } },
+	teams: {
+		list: { v1: listTeamsContractV1 },
+		getUsage: { v1: getTeamUsageContractV1 }
+	},
 	analytics: { get: { v1: getProjectAnalyticsContractV1 } },
+	intents: { list: { v1: listIntentsContractV1 } },
+	intentCategories: {
+		list: { v1: listIntentCategoriesContractV1 },
+		create: { v1: createIntentCategoryContractV1 },
+		update: { v1: updateIntentCategoryContractV1 },
+		delete: { v1: deleteIntentCategoryContractV1 },
+		link: { v1: linkIntentCategoryContractV1 },
+		unlink: { v1: unlinkIntentCategoryContractV1 }
+	},
+	feedbacks: { list: { v1: listFeedbacksContractV1 } },
 	deployments: {
 		list: { v1: listDeploymentsContractV1 },
 		get: { v1: getDeploymentContractV1 },
@@ -633,7 +2292,8 @@ const contract = {
 		create: { v1: createEnvironmentContractV1 },
 		get: { v1: getEnvironmentContractV1 },
 		deploy: { v1: deployEnvironmentContractV1 },
-		getLogs: { v1: getLogsContractV1 }
+		getLogs: { v1: getLogsContractV1 },
+		getLatestLogs: { v1: getLatestLogsContractV1 }
 	},
 	environmentVariables: {
 		list: { v1: listEnvironmentVariablesContractV1 },
@@ -648,6 +2308,10 @@ const contract = {
 		create: { v1: createProjectContractV1 },
 		delete: { v1: deleteProjectContractV1 }
 	},
+	playground: {
+		get: { v1: getPlaygroundContractV1 },
+		upsert: { v1: upsertPlaygroundContractV1 }
+	},
 	tunnels: { getTicket: { v1: getTunnelTicketContractV1 } },
 	distribution: {
 		publish: { v1: publishServerContractV1 },
@@ -658,5 +2322,10 @@ const contract = {
 		get: { v1: getBeaconContractV1 }
 	}
 };
+const { uploadArtifact: _discard, ...deploymentsForDocs } = contract.deployments;
+const contractForDocs = {
+	...contract,
+	deployments: deploymentsForDocs
+};
 //#endregion
-export { analysisStatusSchema, auditReportSchema, buildSettingsSchema, checkDetailSchema, checkResultSchema, contract, createEnvironmentContractV1, deploymentStatusSchema, environmentVariableSchema, environmentVariablesSchema, platformSchema, runtimeSchema, serverFieldsSchema, transportSchema };
+export { AUTH_SCOPE_ANY, AUTH_SCOPE_USER, INTENT_CATEGORY_COLORS, PLATFORM_LABELS, buildSettingsSchema, contract, contractForDocs, createEnvironmentContractV1, deploymentStatusSchema, environmentVariableSchema, environmentVariablesSchema, intentCategoryColorSchema, playgroundExamplePromptSchema, playgroundHeaderSchema, runtimeSchema, serverFieldsSchema, transportSchema, updateEnvironmentVariableSchema };