@zuplo/cli 6.71.21 → 6.71.23

package/node_modules/@zuplo/runtime/out/types/mcp-gateway/index.d.ts

@@ -546,6 +546,7 @@ declare type HttpStatusCodeRangeDefinition =
 declare abstract class InboundPolicy<
   TOptions = any,
 > extends PolicyBase<TOptions> {
+  readonly direction: PolicyDirection;
   /**
    * The handler that is called each time this policy is invoked
    *
@@ -964,6 +965,7 @@ declare interface Logger extends BaseLogger {
  */
 export declare class McpAuth0OAuthInboundPolicy extends InboundPolicy<ValidatedAuth0OAuthOptions> {
   #private;
+  static readonly policyType = "mcp-auth0-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1142,6 +1144,7 @@ declare const mcpAuth0OAuthOptionsSchema: z.ZodObject<
  */
 export declare class McpCapabilityFilterInboundPolicy extends InboundPolicy<ValidatedOptions> {
   #private;
+  static readonly policyType = "mcp-capability-filter";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1267,6 +1270,7 @@ declare const mcpCapabilityFilterOptionsSchema: z.ZodObject<
  */
 export declare class McpClerkOAuthInboundPolicy extends InboundPolicy<McpClerkOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-clerk-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1337,6 +1341,7 @@ export declare interface McpClerkOAuthInboundPolicyOptions {
  */
 export declare class McpCognitoOAuthInboundPolicy extends InboundPolicy<McpCognitoOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-cognito-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1418,6 +1423,7 @@ export declare interface McpCognitoOAuthInboundPolicyOptions {
  */
 export declare class McpEntraOAuthInboundPolicy extends InboundPolicy<McpEntraOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-entra-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1549,6 +1555,7 @@ export declare interface McpGatewayPluginOptions {
  */
 export declare class McpGoogleOAuthInboundPolicy extends InboundPolicy<McpGoogleOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-google-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1619,6 +1626,7 @@ export declare interface McpGoogleOAuthInboundPolicyOptions {
  */
 export declare class McpKeycloakOAuthInboundPolicy extends InboundPolicy<McpKeycloakOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-keycloak-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1696,6 +1704,7 @@ export declare interface McpKeycloakOAuthInboundPolicyOptions {
  */
 export declare class McpLogtoOAuthInboundPolicy extends InboundPolicy<McpLogtoOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-logto-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -1774,6 +1783,7 @@ export declare interface McpLogtoOAuthInboundPolicyOptions {
  * @product mcp-gateway
  */
 export declare class McpOAuthInboundPolicy extends InboundPolicy<McpOAuthRuntimeConfig> {
+  static readonly policyType = "mcp-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -2050,6 +2060,7 @@ declare const mcpOAuthRuntimeConfigSchema: z.ZodObject<
  */
 export declare class McpOktaOAuthInboundPolicy extends InboundPolicy<McpOktaOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-okta-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -2127,6 +2138,7 @@ export declare interface McpOktaOAuthInboundPolicyOptions {
  */
 export declare class McpOneLoginOAuthInboundPolicy extends InboundPolicy<McpOneLoginOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-onelogin-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -2197,6 +2209,7 @@ export declare interface McpOneLoginOAuthInboundPolicyOptions {
  */
 export declare class McpPingOAuthInboundPolicy extends InboundPolicy<McpPingOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-ping-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -2289,6 +2302,7 @@ export declare function McpProxyHandler(
  * @product mcp-gateway
  */
 export declare class McpTokenExchangeInboundPolicy extends InboundPolicy<UpstreamTokenExchangePolicyOptions> {
+  static readonly policyType = "mcp-token-exchange";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -2365,6 +2379,7 @@ export declare interface McpTokenExchangeInboundPolicyOptions {
  */
 export declare class McpWorkosOAuthInboundPolicy extends InboundPolicy<McpWorkosOAuthInboundPolicyOptions> {
   #private;
+  static readonly policyType = "mcp-workos-oauth";
   constructor(rawOptions: unknown, policyName: string);
   handler(
     request: ZuploRequest,
@@ -3048,16 +3063,11 @@ declare interface ParsedRouteData extends Omit<RouteData, "corsPolicies"> {
   /* Excluded from this release type: getInboundPolicyInstance */
 }
 
-/**
- * The base class for inbound and outbound policies.
- * Provides common functionality for all policy types.
- *
- * @public
- */
 declare abstract class PolicyBase<TOptions = any> {
   options: TOptions;
   policyName: string;
-  policyType: string;
+  /* Excluded from this release type: policyType */
+  /* Excluded from this release type: direction */
   /* Excluded from this release type: __constructor */
 }
 
@@ -3071,6 +3081,22 @@ declare interface PolicyConfiguration {
   options?: unknown;
 }
 
+/**
+ * The base class for inbound and outbound policies.
+ * Provides common functionality for all policy types.
+ *
+ * @public
+ */
+/**
+ * The pipeline phase a policy runs in. Inbound policies run on the request
+ * before the handler; outbound policies run on the response after it. This is
+ * determined structurally by whether a policy extends {@link InboundPolicy} or
+ * {@link OutboundPolicy}, so it can never drift from the policy's real phase.
+ *
+ * @public
+ */
+declare type PolicyDirection = "inbound" | "outbound";
+
 /**
  * @public
  */

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.71.21",
+  "version": "6.71.23",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/iconv-lite/encodings/sbcs-data.js

@@ -109,6 +109,8 @@ module.exports = {
 
   hebrew: "iso88598",
   hebrew8: "iso88598",
+  iso88598i: "iso88598",
+  iso88598e: "iso88598",
 
   turkish: "iso88599",
   turkish8: "iso88599",

package/node_modules/iconv-lite/encodings/utf32.js

@@ -31,7 +31,9 @@ function Utf32Encoder (options, codec) {
 
 Utf32Encoder.prototype.write = function (str) {
   var src = Buffer.from(str, "ucs2")
-  var dst = Buffer.alloc(src.length * 2)
+  // src.length * 2 covers this chunk's code units (4 bytes each); the extra 4 bytes leave room for a
+  // high surrogate held over from a previous chunk, which is flushed ahead of this chunk's units.
+  var dst = Buffer.alloc(src.length * 2 + 4)
   var write32 = this.isLE ? dst.writeUInt32LE : dst.writeUInt32BE
   var offset = 0
 
@@ -113,9 +115,9 @@ Utf32Decoder.prototype.write = function (src) {
       // NOTE: codepoint is a signed int32 and can be negative.
       // NOTE: We copied this block from below to help V8 optimize it (it works with array, not buffer).
       if (isLE) {
-        codepoint = overflow[i] | (overflow[i + 1] << 8) | (overflow[i + 2] << 16) | (overflow[i + 3] << 24)
+        codepoint = overflow[0] | (overflow[1] << 8) | (overflow[2] << 16) | (overflow[3] << 24)
       } else {
-        codepoint = overflow[i + 3] | (overflow[i + 2] << 8) | (overflow[i + 1] << 16) | (overflow[i] << 24)
+        codepoint = overflow[3] | (overflow[2] << 8) | (overflow[1] << 16) | (overflow[0] << 24)
       }
       overflow.length = 0
 
@@ -169,7 +171,12 @@ function _writeCodepoint (dst, offset, codepoint, badChar) {
 };
 
 Utf32Decoder.prototype.end = function () {
+  if (this.overflow.length === 0) { return }
+
+  // A leftover, incomplete 4-byte code unit at the end of the input is ill-formed. Substitute a
+  // single U+FFFD (Unicode Standard conformance clause C10) instead of silently dropping the bytes.
   this.overflow.length = 0
+  return String.fromCharCode(this.badChar)
 }
 
 // == UTF-32 Auto codec =============================================================

package/node_modules/iconv-lite/package.json

@@ -1,7 +1,7 @@
 {
     "name": "iconv-lite",
     "description": "Convert character encodings in pure javascript.",
-    "version": "0.7.2",
+    "version": "0.7.3",
     "license": "MIT",
     "keywords": [
         "iconv",
@@ -46,7 +46,7 @@
         "stream": false
     },
     "devDependencies": {
-        "@arethetypeswrong/cli": "^0.17.4",
+        "@arethetypeswrong/cli": "^0.18.4",
         "@stylistic/eslint-plugin": "^5.1.0",
         "@stylistic/eslint-plugin-js": "^4.1.0",
         "@types/node": "^24.0.12",

package/node_modules/iconv-lite/types/encodings.d.ts

@@ -276,6 +276,8 @@ export type Encoding =
   | "iso88596"
   | "iso88597"
   | "iso88598"
+  | "iso88598e"
+  | "iso88598i"
   | "iso88599"
   | "isoceltic"
   | "isoir100"

package/node_modules/protobufjs/dist/light/protobuf.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.4 (c) 2016, daniel wirtz
- * compiled fri, 12 jun 2026 12:10:46 utc
+ * protobuf.js v7.6.5 (c) 2016, daniel wirtz
+ * compiled sat, 04 jul 2026 01:13:07 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */

package/node_modules/protobufjs/dist/light/protobuf.min.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.4 (c) 2016, daniel wirtz
- * compiled fri, 12 jun 2026 12:10:47 utc
+ * protobuf.js v7.6.5 (c) 2016, daniel wirtz
+ * compiled sat, 04 jul 2026 01:13:07 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */

package/node_modules/protobufjs/dist/minimal/protobuf.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.4 (c) 2016, daniel wirtz
- * compiled fri, 12 jun 2026 12:10:46 utc
+ * protobuf.js v7.6.5 (c) 2016, daniel wirtz
+ * compiled sat, 04 jul 2026 01:13:07 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */

package/node_modules/protobufjs/dist/minimal/protobuf.min.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.4 (c) 2016, daniel wirtz
- * compiled fri, 12 jun 2026 12:10:47 utc
+ * protobuf.js v7.6.5 (c) 2016, daniel wirtz
+ * compiled sat, 04 jul 2026 01:13:07 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */

package/node_modules/protobufjs/dist/protobuf.js

@@ -1,6 +1,6 @@
 /*!
- * protobuf.js v7.6.4 (c) 2016, daniel wirtz
- * compiled fri, 12 jun 2026 12:10:46 utc
+ * protobuf.js v7.6.5 (c) 2016, daniel wirtz
+ * compiled sat, 04 jul 2026 01:13:07 utc
  * licensed under the bsd-3-clause license
  * see: https://github.com/dcodeio/protobuf.js for details
  */
@@ -5211,6 +5211,9 @@ function parse(source, root, options) {
             }
 
             while (token !== "=") {
+                if (token === null) {
+                    throw illegal(token, "end of input");
+                }
                 if (token === "(") {
                     var parensValue = next();
                     skip(")");