@zuplo/cli 6.70.7 → 6.70.8

package/node_modules/@zuplo/runtime/out/types/mcp-gateway/index.d.ts

@@ -941,7 +941,7 @@ declare interface Logger extends BaseLogger {
  * time (see `setupRoutes`); this request-time entry point delegates straight
  * to the underlying OAuth implementation.
  *
- * @beta
+ * @hidden
  * @title MCP Auth0 OAuth
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
@@ -1045,7 +1045,7 @@ export declare class McpGatewayPlugin extends SystemRuntimePlugin {
  * token presented by the MCP client and hydrate the principal onto the
  * request context.
  *
- * @beta
+ * @hidden
  * @title MCP OAuth
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
@@ -1142,7 +1142,7 @@ export declare interface McpOAuthInboundPolicyOptions {
  * on the request context for `McpVirtualServerHandler`, which resolves
  * credentials during capability dispatch.
  *
- * @beta
+ * @hidden
  * @title MCP Upstream Connection
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
@@ -1178,11 +1178,11 @@ export declare interface McpUpstreamConnectionInboundPolicyOptions {
    */
   protectedResourceMetadataUrl?: string;
   /**
-   * Additional request headers the gateway should inject when calling the upstream.
+   * Additional request headers the gateway should inject when calling the upstream. Use `$env(VAR_NAME)` to read the value from an environment variable. Combine with `required: false` to skip the header when the env variable is unset.
    */
   requestHeaders?: {
     name: string;
-    valueEnv: string;
+    value?: string;
     required?: boolean;
   }[];
   /**
@@ -1207,11 +1207,7 @@ export declare interface McpUpstreamConnectionInboundPolicyOptions {
    */
   clientId?: string;
   /**
-   * Environment variable holding the OAuth client secret (for OAuth modes with manual registration).
-   */
-  clientSecretEnv?: string;
-  /**
-   * OAuth client secret reference, either an env var name or `$env(VAR_NAME)` (for OAuth modes with manual registration).
+   * OAuth client secret (for OAuth modes with manual registration). Use `$env(VAR_NAME)` to source from an environment variable.
    */
   clientSecret?: string;
   /**
@@ -1231,7 +1227,10 @@ export declare interface McpUpstreamConnectionInboundPolicyOptions {
     | {
         mode: "manual";
         clientId: string;
-        clientSecretEnv?: string;
+        /**
+         * OAuth client secret. Use `$env(VAR_NAME)` to source from an environment variable.
+         */
+        clientSecret?: string;
         tokenEndpointAuthMethod?:
           | "client_secret_basic"
           | "client_secret_post"

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.70.7",
+  "version": "6.70.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "6.70.7",
+  "version": "6.70.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -29,10 +29,10 @@
     "@opentelemetry/api": "1.9.0",
     "@sentry/node": "9.22.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "6.70.7",
+    "@zuplo/core": "6.70.8",
     "@zuplo/editor": "1.0.20821740935",
-    "@zuplo/openapi-tools": "6.70.7",
-    "@zuplo/runtime": "6.70.7",
+    "@zuplo/openapi-tools": "6.70.8",
+    "@zuplo/runtime": "6.70.8",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -66,8 +66,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "3.25.76",
-    "@zuplo/graphql": "6.70.7",
-    "@zuplo/otel": "6.70.7"
+    "@zuplo/graphql": "6.70.8",
+    "@zuplo/otel": "6.70.8"
   },
   "bundleDependencies": [
     "@fastify/cors",