@zuplo/cli 6.70.57 → 6.70.59

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -7115,8 +7115,10 @@ export declare interface MTLSAuthMetadata {
   notAfter: string;
   /**
    * Certificate SHA-256 fingerprint formatted as uppercase colon-separated hex.
+   * Omitted when the upstream proxy did not provide the fingerprint and the
+   * full certificate body is unavailable.
    */
-  sha256Fingerprint: string;
+  sha256Fingerprint?: string;
 }
 
 declare interface MultiRequests {

package/node_modules/@zuplo/runtime/out/types/mcp-gateway/index.d.ts

@@ -1382,6 +1382,8 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
  * ```
  */
 export declare class McpGatewayPlugin extends SystemRuntimePlugin {
+  #private;
+  constructor(options?: McpGatewayPluginOptions);
   registerRoutes(options: {
     router: Router;
     runtimeSettings: RuntimeSettings;
@@ -1389,6 +1391,32 @@ export declare class McpGatewayPlugin extends SystemRuntimePlugin {
   }): void;
 }
 
+/**
+ * Options for the {@link McpGatewayPlugin}.
+ *
+ * @beta
+ */
+export declare interface McpGatewayPluginOptions {
+  /**
+   * Base path under which the gateway mounts its internal OAuth and
+   * upstream-connection action routes (e.g. `/oauth/token`,
+   * `/auth/connections/{id}/connect`). Namespacing these routes keeps them out
+   * of your API's route namespace so a route such as `/oauth/token` in
+   * `routes.oas.json` does not collide with the gateway's own endpoints.
+   *
+   * The OAuth discovery documents
+   * (`/.well-known/oauth-authorization-server` and
+   * `/.well-known/oauth-protected-resource/...`) always remain at the origin
+   * root, because RFC 8414 / RFC 9728 locate them relative to the gateway
+   * issuer; only the action routes move under `basePath`.
+   *
+   * Pass `"/"` to mount the action routes at the origin root.
+   *
+   * @default "/__zuplo"
+   */
+  basePath?: string;
+}
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Google.

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.70.57",
+  "version": "6.70.59",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/protobufjs/dist/light/protobuf.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.1 (c) 2016, daniel wirtz
- * compiled fri, 22 may 2026 02:52:08 utc
+ * protobuf.js v7.6.2 (c) 2016, daniel wirtz
+ * compiled sat, 30 may 2026 21:57:57 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */
@@ -1207,7 +1207,7 @@ function genValuePartial_fromObject(gen, field, fieldIndex, prop) {
             } gen
             ("}");
         } else gen
-            ("if(typeof d%s!==\"object\")", prop)
+            ("if(!util.isObject(d%s))", prop)
                 ("throw TypeError(%j)", field.fullName + ": object expected")
             ("m%s=types[%i].fromObject(d%s,n+1)", prop, fieldIndex, prop);
     } else {
@@ -1274,6 +1274,8 @@ converter.fromObject = function fromObject(mtype) {
     var gen = util.codegen(["d", "n"], mtype.name + "$fromObject")
     ("if(d instanceof this.ctor)")
         ("return d")
+    ("if(!util.isObject(d))")
+        ("throw TypeError(%j)", mtype.fullName + ": object expected")
     ("if(n===undefined)n=0")
     ("if(n>util.recursionLimit)")
         ("throw Error(\"maximum nesting depth exceeded\")");
@@ -1288,7 +1290,7 @@ converter.fromObject = function fromObject(mtype) {
         // Map fields
         if (field.map) { gen
     ("if(d%s){", prop)
-        ("if(typeof d%s!==\"object\")", prop)
+        ("if(!util.isObject(d%s))", prop)
             ("throw TypeError(%j)", field.fullName + ": object expected")
         ("m%s={}", prop)
         ("for(var ks=Object.keys(d%s),i=0;i<ks.length;++i){", prop);
@@ -5049,7 +5051,7 @@ Root._configure = function(Type_, parse_, common_) {
 
 },{"16":16,"17":17,"23":23,"25":25,"35":35}],29:[function(require,module,exports){
 "use strict";
-module.exports = {};
+module.exports = Object.create(null);
 
 /**
  * Named roots.