@zuplo/cli 6.72.15 → 6.72.17

package/node_modules/@fastify/fast-json-stringify-compiler/node_modules/fast-uri/index.js

@@ -202,6 +202,10 @@ function serialize (cmpts, opts) {
 
 const URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u
 
+// Captures the authority component (between "//" and the next "/", "?" or "#"),
+// with or without a scheme prefix, for the literal-backslash rejection below.
+const AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/
+
 /**
  * @param {import('./types/index').URIComponent} parsed
  * @param {RegExpMatchArray} matches
@@ -248,6 +252,19 @@ function parseWithStatus (uri, opts) {
     }
   }
 
+  // A literal backslash (U+005C) is not a valid RFC 3986 URI character and is
+  // not an authority delimiter. Reject it in the authority rather than
+  // rewriting it: normalizing "\" -> "/" (WHATWG error recovery) could silently
+  // change the resource identified by an otherwise-invalid input, and lets "\"
+  // act as a host delimiter here while Node's native URL parses a different
+  // host (SSRF / redirect / origin-allowlist bypass). Percent-encoded %5C is
+  // untouched and remains valid encoded data.
+  const authorityMatch = uri.match(AUTHORITY_PREFIX)
+  if (authorityMatch !== null && authorityMatch[1].indexOf('\\') !== -1) {
+    parsed.error = 'URI authority must not contain a literal backslash.'
+    malformedAuthorityOrPort = true
+  }
+
   const matches = uri.match(URI_PARSE)
 
   if (matches) {

package/node_modules/@fastify/fast-json-stringify-compiler/node_modules/fast-uri/package.json

@@ -1,7 +1,7 @@
 {
   "name": "fast-uri",
   "description": "Dependency-free RFC 3986 URI toolbox",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "main": "index.js",
   "type": "commonjs",
   "types": "types/index.d.ts",

package/node_modules/@fastify/fast-json-stringify-compiler/node_modules/fast-uri/test/security.test.js

@@ -159,3 +159,65 @@ test('parse canonicalises IDN / Unicode hosts to their ASCII form', (t) => {
     t.equal(parsed.host, expectedHost, `host canonicalised to ASCII: ${description}`)
   })
 })
+
+test('parse rejects a literal backslash in the authority as malformed (RFC 3986)', (t) => {
+  // Regression for the host-confusion bypass: a literal "\" is invalid RFC 3986
+  // syntax and must be flagged malformed, not silently rewritten. Otherwise "\"
+  // acts as a host delimiter here while Node's native URL parses a different
+  // host, defeating a host-based SSRF/redirect/origin allowlist.
+  const cases = [
+    'http://evil.com\\@allowed.com',
+    'https://169.254.169.254\\@trusted.example.com',
+    'http://127.0.0.1\\@public.example.com',
+    'https://attacker.com\\@api.internal',
+    'http://a\\@b',
+    'ws://evil.com\\@allowed.com/chat',
+    'wss://evil.com\\@allowed.com/chat',
+    'http://evil.com\\%40allowed.com',
+    '//evil.com\\@allowed.com'
+  ]
+
+  t.plan(cases.length)
+
+  cases.forEach((input) => {
+    t.equal(
+      fastURI.parse(input).error,
+      'URI authority must not contain a literal backslash.',
+      input
+    )
+  })
+})
+
+test('normalize does not canonicalize a literal-backslash URI into a different valid URL', (t) => {
+  const cases = [
+    'http://evil.com\\@allowed.com',
+    'https://attacker.com\\@api.internal'
+  ]
+
+  t.plan(cases.length)
+
+  cases.forEach((input) => {
+    t.equal(fastURI.normalize(input), input, input)
+  })
+})
+
+test('parse leaves percent-encoded %5C untouched as encoded data (not rejected)', (t) => {
+  // Only the literal "\" byte is rejected; %5C stays valid encoded data and
+  // does not diverge from the native URL parser, so it must not be flagged.
+  const input = 'http://evil.com%5C@allowed.com'
+  const parsed = fastURI.parse(input)
+
+  t.plan(2)
+  t.notOk(parsed.error, '%5C is valid encoded data, not malformed')
+  t.equal(parsed.host, new URL(input).hostname, '%5C host matches native URL (no divergence)')
+})
+
+test('parse does not reject a literal backslash in the query or fragment', (t) => {
+  // The rejection is scoped to the authority/path (the host-confusion surface);
+  // a backslash after "?"/"#" is normalized as encoded data as before.
+  const parsed = fastURI.parse('http://host.example.com/?x=\\y#z\\w')
+
+  t.plan(2)
+  t.notOk(parsed.error, 'backslash in query/fragment does not mark the URI malformed')
+  t.equal(parsed.host, 'host.example.com', 'host parsed normally')
+})

package/node_modules/@fastify/reply-from/CLAUDE.md

@@ -0,0 +1,66 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Development Commands
+
+### Testing
+- `npm test` - Run all tests (unit + TypeScript)
+- `npm run test:unit` - Run unit tests with coverage using c8 and Node.js test runner
+- `npm run test:typescript` - Run TypeScript definition tests using tsd
+
+### Linting
+- `npm run lint` - Run ESLint to check code style
+- `npm run lint:fix` - Run ESLint with automatic fixes
+- ESLint configuration uses neostandard with TypeScript support
+
+### Building
+- No build step required - this is a CommonJS library
+
+## Architecture Overview
+
+This is a Fastify plugin for proxying HTTP requests to upstream servers. The plugin decorates the Fastify reply with a `from()` method.
+
+### Key Components
+
+**Main Plugin (`index.js`)**
+- Entry point that registers the plugin using fastify-plugin
+- Decorates `reply.from(source, opts)` method
+- Handles request proxying, retries, caching, and error handling
+- Supports HTTP/1.1, HTTP/2, and Undici client strategies
+
+**Request Builder (`lib/request.js`)**
+- Factory for creating request handlers based on transport (HTTP/1.1, HTTP/2, Undici)
+- Handles different agent configurations (HTTP, HTTPS, Unix sockets)
+- Manages timeouts, connection pooling, and retry logic
+- Returns unified interface: `{ request, close, retryOnError }`
+
+**Utilities (`lib/utils.js`)**
+- `filterPseudoHeaders()` - Removes HTTP/2 pseudo-headers (starting with :)
+- `copyHeaders()` - Copies headers to Fastify reply
+- `stripHttp1ConnectionHeaders()` - Removes HTTP/1 connection-specific headers for HTTP/2
+- `buildURL()` - Constructs destination URLs with base path validation
+
+**Error Definitions (`lib/errors.js`)**
+- Standardized error types using @fastify/error
+- Maps different error conditions to appropriate HTTP status codes
+- Includes timeout, connection reset, and gateway errors
+
+### Transport Strategies
+
+1. **Undici (default)** - High-performance HTTP/1.1 client with connection pooling
+2. **HTTP/2** - Native Node.js HTTP/2 client for modern protocols  
+3. **HTTP/1.1** - Node.js built-in http/https modules with custom agents
+
+### Key Features
+
+- **Caching**: URL parsing cache using toad-cache LruMap (default 100 entries)
+- **Retries**: Configurable retry logic for socket hangups and 503 errors
+- **Headers**: Smart header rewriting for HTTP/1.1 ↔ HTTP/2 compatibility
+- **Body handling**: Supports streams, JSON encoding, and custom content types
+- **Unix sockets**: Special handling for unix+http: and unix+https: protocols
+- **Timeouts**: Per-request and session-level timeout configuration
+
+### Configuration
+
+The plugin accepts extensive configuration for different transport methods, retry behavior, caching, and request/response transformation hooks. See README.md for full option documentation.

package/node_modules/@fastify/reply-from/index.js

@@ -81,7 +81,7 @@ const fastifyReplyFrom = fp(function from (fastify, opts, next) {
     const dest = getUpstream(this.request, base)
     let url
     if (cache) {
-      const cacheKey = dest + source
+      const cacheKey = JSON.stringify([dest, source])
       url = cache.get(cacheKey) || buildURL(source, dest)
       cache.set(cacheKey, url)
     } else {
@@ -231,10 +231,14 @@ const fastifyReplyFrom = fp(function from (fastify, opts, next) {
         onError(this, { error: new BadGatewayError() })
         this.request.log.warn(err, 'response has invalid status code')
       }
-      if (this.request.raw.aborted && isHttp2) {
+      if (this.request.raw.aborted) {
         // the request could have been canceled before we got a response from the target
-        // forward this to the upstream server and close the stream to prevent leaks
-        res.stream.close(NGHTTP2_CANCEL)
+        // clean up the upstream stream to prevent leaks and skip sending a reply
+        if (isHttp2) {
+          res.stream.close(NGHTTP2_CANCEL)
+        } else {
+          res.stream.destroy()
+        }
         // no need to send a reply for aborted requests or call the onResponse callback
         return
       }

package/node_modules/@fastify/reply-from/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastify/reply-from",
-  "version": "12.6.3",
+  "version": "12.6.4",
   "description": "forward your HTTP request to another server, for fastify",
   "main": "index.js",
   "type": "commonjs",

package/node_modules/@fastify/reply-from/test/fix-GHSA-v574-6498-x57v.test.js

@@ -0,0 +1,219 @@
+'use strict'
+
+const t = require('node:test')
+const Fastify = require('fastify')
+const From = require('..')
+
+// GHSA-v574-6498-x57v: Cache key collision via ambiguous concatenation.
+// dest + source was used as the cache key.  Different (dest, source) pairs
+// could produce identical concatenations while resolving to different URLs,
+// causing a request to be forwarded to the wrong upstream.
+//
+//   dest   = http://127.0.0.1:31001  , source = /private
+//   dest   = http://127.0.0.1:3100   , source = 1/private
+//
+// Both concatenate to "http://127.0.0.1:31001/private" but resolve to
+// different URLs.
+
+async function run (t) {
+  // victim upstream on port 31001 with a private route and a writable route
+  const victim = Fastify({ keepAliveTimeout: 1 })
+  victim.get('/private', async () => ({ marker: 'VICTIM_PRIVATE_DATA' }))
+  victim.get('/state', async () => ({ written: victim.written }))
+  victim.post('/private', async (req, reply) => {
+    victim.written = req.body
+    return { marker: 'VICTIM_PRIVATE_DATA', written: victim.written }
+  })
+  t.after(() => victim.close())
+  await victim.listen({ port: 31001 })
+
+  // attacker upstream on port 3100
+  const attacker = Fastify({ keepAliveTimeout: 1 })
+  attacker.get('/1/private', async () => ({ marker: 'ATTACKER_UPSTREAM' }))
+  attacker.post('/1/private', async (req, reply) => {
+    return { marker: 'ATTACKER_UPSTREAM', written: req.body }
+  })
+  t.after(() => attacker.close())
+  await attacker.listen({ port: 3100 })
+
+  // proxy using getUpstream() and default cache
+  const proxy = Fastify({ keepAliveTimeout: 1 })
+  proxy.register(From, {
+    base: 'http://localhost',
+    http: true
+  })
+
+  proxy.get('/proxy/victim/private', (req, reply) => {
+    reply.from('/private', {
+      getUpstream () {
+        return 'http://127.0.0.1:31001'
+      }
+    })
+  })
+
+  proxy.post('/proxy/victim/write', (req, reply) => {
+    reply.from('/private', {
+      method: 'POST',
+      body: JSON.stringify(req.body),
+      contentType: 'application/json',
+      getUpstream () {
+        return 'http://127.0.0.1:31001'
+      }
+    })
+  })
+
+  proxy.get('/proxy/attacker/private', (req, reply) => {
+    reply.from('1/private', {
+      getUpstream () {
+        return 'http://127.0.0.1:3100'
+      }
+    })
+  })
+
+  proxy.post('/proxy/attacker/write', (req, reply) => {
+    reply.from('1/private', {
+      method: 'POST',
+      body: JSON.stringify(req.body),
+      contentType: 'application/json',
+      getUpstream () {
+        return 'http://127.0.0.1:3100'
+      }
+    })
+  })
+
+  proxy.get('/proxy/victim/state', (req, reply) => {
+    reply.from('/state', {
+      getUpstream () {
+        return 'http://127.0.0.1:31001'
+      }
+    })
+  })
+
+  t.after(() => proxy.close())
+  await proxy.listen({ port: 31000 })
+
+  // prime the cache with the victim entry (dest = "http://127.0.0.1:31001", source = "/private")
+  const primeRes = await fetch('http://127.0.0.1:31000/proxy/victim/private')
+  t.assert.strictEqual(primeRes.status, 200)
+
+  // now the attacker pair (dest = "http://127.0.0.1:3100", source = "1/private")
+  // should NOT reuse the cached URL — it must resolve to the attacker upstream.
+
+  // 1. attacker read — should return ATTACKER_UPSTREAM, not VICTIM_PRIVATE_DATA
+  const attackerReadRes = await fetch('http://127.0.0.1:31000/proxy/attacker/private')
+  t.assert.strictEqual(attackerReadRes.status, 200)
+  const attackerReadBody = await attackerReadRes.json()
+  t.assert.strictEqual(
+    attackerReadBody.marker,
+    'ATTACKER_UPSTREAM',
+    'attacker request must reach attacker upstream, not victim'
+  )
+
+  // 2. attacker write — should write to attacker, not victim
+  const attackerWriteRes = await fetch('http://127.0.0.1:31000/proxy/attacker/write', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ changedBy: 'attacker' })
+  })
+  t.assert.strictEqual(attackerWriteRes.status, 200)
+
+  // 3. verify victim state is unchanged (victim.written should be undefined/null)
+  const victimStateRes = await fetch('http://127.0.0.1:31000/proxy/victim/state')
+  t.assert.strictEqual(victimStateRes.status, 200)
+  const victimStateBody = await victimStateRes.json()
+  t.assert.strictEqual(
+    victimStateBody.written,
+    undefined,
+    'victim state must not be affected by attacker write'
+  )
+}
+
+t.test('GHSA-v574-6498-x57v: cache key collision via ambiguous concatenation', async (t) => {
+  t.plan(6)
+  await run(t)
+})
+
+t.test('GHSA-v574-6498-x57v: cache key delimiter cannot be injected', async (t) => {
+  const victim = Fastify()
+  victim.get('/*', async (req) => ({ marker: 'VICTIM', path: req.url }))
+  t.after(() => victim.close())
+  const victimOrigin = await victim.listen({ host: '127.0.0.1', port: 0 })
+
+  const attacker = Fastify()
+  attacker.get('/*', async (req) => ({ marker: 'ATTACKER', path: req.url }))
+  t.after(() => attacker.close())
+  const attackerOrigin = await attacker.listen({ host: '127.0.0.1', port: 0 })
+
+  const victimPair = {
+    source: 'private',
+    dest: `${victimOrigin}/|${attackerOrigin}/`
+  }
+  const attackerPair = {
+    source: `private|${victimOrigin}/`,
+    dest: `${attackerOrigin}/`
+  }
+
+  // These pairs collide when the key is source + '|' + dest.
+  t.assert.strictEqual(
+    victimPair.source + '|' + victimPair.dest,
+    attackerPair.source + '|' + attackerPair.dest
+  )
+
+  const proxy = Fastify()
+  proxy.register(From, {
+    base: 'http://localhost',
+    http: true
+  })
+  proxy.get('/prime', (req, reply) => {
+    reply.from(victimPair.source, {
+      getUpstream: () => victimPair.dest
+    })
+  })
+  proxy.get('/collide', (req, reply) => {
+    reply.from(attackerPair.source, {
+      getUpstream: () => attackerPair.dest
+    })
+  })
+  t.after(() => proxy.close())
+
+  const primeResponse = await proxy.inject('/prime')
+  t.assert.strictEqual(primeResponse.statusCode, 200)
+  t.assert.strictEqual(primeResponse.json().marker, 'VICTIM')
+
+  const attackerResponse = await proxy.inject('/collide')
+  t.assert.strictEqual(attackerResponse.statusCode, 200)
+  t.assert.strictEqual(
+    attackerResponse.json().marker,
+    'ATTACKER',
+    'attacker request must not reuse the victim cache entry'
+  )
+})
+
+t.test('GHSA-v574-6498-x57v: cache key distinguishes an absent base', async (t) => {
+  const target = Fastify()
+  target.get('/private', async () => ({ marker: 'TARGET' }))
+  t.after(() => target.close())
+  const targetOrigin = await target.listen({ host: '127.0.0.1', port: 0 })
+  const source = `${targetOrigin}/private`
+
+  const proxy = Fastify()
+  proxy.register(From, { http: true })
+  proxy.get('/prime', (req, reply) => reply.from(source))
+  proxy.get('/invalid', (req, reply) => {
+    reply.from(source, {
+      getUpstream: () => 'undefined'
+    })
+  })
+  t.after(() => proxy.close())
+
+  const primeResponse = await proxy.inject('/prime')
+  t.assert.strictEqual(primeResponse.statusCode, 200)
+  t.assert.strictEqual(primeResponse.json().marker, 'TARGET')
+
+  const invalidResponse = await proxy.inject('/invalid')
+  t.assert.strictEqual(
+    invalidResponse.statusCode,
+    500,
+    'invalid upstream must not reuse the entry cached without a base'
+  )
+})

package/node_modules/@fastify/reply-from/test/http1-aborted-request.test.js

@@ -0,0 +1,61 @@
+'use strict'
+
+const t = require('node:test')
+const Fastify = require('fastify')
+const From = require('..')
+const http = require('node:http')
+const { once } = require('node:events')
+
+// See https://github.com/fastify/fastify-reply-from/issues/419
+// When a client aborts an HTTP/1 request before the upstream target responds,
+// reply-from must not attempt to forward the (late) upstream response: it should
+// neither invoke the onResponse callback nor pipe the upstream body to the
+// already-closed reply. The equivalent HTTP/2 path was already handled; this
+// covers the HTTP/1 path.
+t.test('does not forward the upstream response when the HTTP/1 request was aborted', async (t) => {
+  t.plan(1)
+
+  // Target that delays its response long enough for the client to abort first.
+  const target = http.createServer((_req, res) => {
+    setTimeout(() => {
+      res.statusCode = 200
+      res.end('hello world')
+    }, 500)
+  })
+  t.after(() => target.close())
+  target.listen({ port: 0 })
+  await once(target, 'listening')
+
+  const instance = Fastify()
+  t.after(() => instance.close())
+
+  let onResponseCalled = false
+  instance.register(From)
+  instance.get('/', (_request, reply) => {
+    reply.from(`http://localhost:${target.address().port}`, {
+      onResponse (_req, replyInner, res) {
+        onResponseCalled = true
+        replyInner.send(res.stream)
+      }
+    })
+  })
+
+  instance.listen({ port: 0 })
+  await once(instance.server, 'listening')
+
+  await new Promise((resolve) => {
+    const req = http.request({
+      host: 'localhost',
+      port: instance.server.address().port,
+      path: '/'
+    }, (res) => { res.resume() })
+    req.on('error', () => {})
+    req.end()
+    // Abort well before the target responds.
+    setTimeout(() => req.destroy(), 50)
+    // Wait past the target's response so any (buggy) forwarding would have happened.
+    setTimeout(resolve, 800)
+  })
+
+  t.assert.strictEqual(onResponseCalled, false, 'onResponse must not run for an aborted request')
+})

package/node_modules/@zuplo/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/core",
-  "version": "6.72.15",
+  "version": "6.72.17",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",

package/node_modules/@zuplo/graphql/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/graphql",
   "type": "module",
-  "version": "6.72.15",
+  "version": "6.72.17",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/@zuplo/openapi-tools/package.json

@@ -2,7 +2,7 @@
   "name": "@zuplo/openapi-tools",
   "type": "module",
   "sideEffects": false,
-  "version": "6.72.15",
+  "version": "6.72.17",
   "description": "Tooling for OpenAPI files",
   "repository": {
     "type": "git",

package/node_modules/@zuplo/otel/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/otel",
   "type": "module",
-  "version": "6.72.15",
+  "version": "6.72.17",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/@zuplo/runtime/out/esm/chunk-2WLR6ZDZ.js

@@ -0,0 +1,26 @@
+
+/*---------------------------------------------------------------------------------------------
+ *  Copyright (c) Zuplo, Inc. All rights reserved.
+ *
+ *  This software and associated documentation files (the "Software") is intended to be used
+ *  only by Zuplo customers solely to develop and test applications that will be deployed
+ *  to Zuplo hosted services. You and others in your organization may use these files on your
+ *  Development Devices solely for the above stated purpose.
+ *
+ *  Outside of uses stated above, no license is granted for any other purpose including
+ *  without limitation the rights to use, copy, modify, merge, publish, distribute,
+ *  sublicense, host, and/or sell copies of the Software.
+ *
+ *  The software may include third party components with separate legal notices or governed by
+ *  other agreements, as described in licenses either embedded in or accompanying the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, 
+ *  INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR 
+ *  PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE 
+ *  FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 
+ *  OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER 
+ *  DEALINGS IN THE SOFTWARE.
+ *--------------------------------------------------------------------------------------------*/
+    
+var h=Object.create;var f=Object.defineProperty;var i=Object.getOwnPropertyDescriptor;var j=Object.getOwnPropertyNames;var k=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty;var m=(a,b)=>f(a,"name",{value:b,configurable:!0});var n=(a,b,c)=>()=>{if(c)throw c[0];try{return a&&(b=a(a=0)),b}catch(d){throw c=[d],d}};var o=(a,b)=>()=>{try{return b||a((b={exports:{}}).exports,b),b.exports}catch(c){throw b=0,c}},p=(a,b)=>{for(var c in b)f(a,c,{get:b[c],enumerable:!0})},g=(a,b,c,d)=>{if(b&&typeof b=="object"||typeof b=="function")for(let e of j(b))!l.call(a,e)&&e!==c&&f(a,e,{get:()=>b[e],enumerable:!(d=i(b,e))||d.enumerable});return a};var q=(a,b,c)=>(c=a!=null?h(k(a)):{},g(b||!a||!a.__esModule?f(c,"default",{value:a,enumerable:!0}):c,a)),r=a=>g(f({},"__esModule",{value:!0}),a);export{m as a,n as b,o as c,p as d,q as e,r as f};
+//# sourceMappingURL=chunk-2WLR6ZDZ.js.map

package/node_modules/@zuplo/runtime/out/esm/chunk-2WLR6ZDZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"mappings":"","names":[]}

package/node_modules/@zuplo/runtime/out/esm/chunk-EJIF2ZML.js

@@ -0,0 +1,26 @@
+
+/*---------------------------------------------------------------------------------------------
+ *  Copyright (c) Zuplo, Inc. All rights reserved.
+ *
+ *  This software and associated documentation files (the "Software") is intended to be used
+ *  only by Zuplo customers solely to develop and test applications that will be deployed
+ *  to Zuplo hosted services. You and others in your organization may use these files on your
+ *  Development Devices solely for the above stated purpose.
+ *
+ *  Outside of uses stated above, no license is granted for any other purpose including
+ *  without limitation the rights to use, copy, modify, merge, publish, distribute,
+ *  sublicense, host, and/or sell copies of the Software.
+ *
+ *  The software may include third party components with separate legal notices or governed by
+ *  other agreements, as described in licenses either embedded in or accompanying the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, 
+ *  INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR 
+ *  PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE 
+ *  FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 
+ *  OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER 
+ *  DEALINGS IN THE SOFTWARE.
+ *--------------------------------------------------------------------------------------------*/
+    
+import{Y as o}from"./chunk-VCMIY3WJ.js";import{a}from"./chunk-2WLR6ZDZ.js";var t={AI_GATEWAY_COST_SUM:"ai_gateway_cost_sum",AI_GATEWAY_REQUEST_COUNT:"ai_gateway_request_count",AI_GATEWAY_TOKEN_SUM:"ai_gateway_token_sum",AI_GATEWAY_LATENCY_HISTOGRAM:"ai_gateway_latency_histogram",AI_GATEWAY_WARNING_COUNT:"ai_gateway_warning_count",AI_GATEWAY_BLOCKED_COUNT:"ai_gateway_blocked_count",AI_GATEWAY_FALLBACK_COUNT:"ai_gateway_fallback_count",MCP_REQUEST_RECEIVED:"mcp_request_received",MCP_REQUEST_COMPLETED:"mcp_request_completed",MCP_REQUEST_REJECTED:"mcp_request_rejected",MCP_INITIALIZE_NEGOTIATED:"mcp_initialize_negotiated",MCP_CLIENT_UNSUPPORTED_BEHAVIOR:"mcp_client_unsupported_behavior",MCP_CAPABILITY_LISTED:"mcp_capability_listed",MCP_CAPABILITY_INVOKED:"mcp_capability_invoked",MCP_CAPABILITY_COMPLETED:"mcp_capability_completed",MCP_CAPABILITY_FAILED:"mcp_capability_failed",MCP_CAPABILITY_CONNECT_REQUIRED:"mcp_capability_connect_required",MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED:"mcp_auth_downstream_token_validated",MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED:"mcp_auth_downstream_token_rejected",MCP_OAUTH_CLIENT_REGISTERED:"mcp_oauth_client_registered",MCP_OAUTH_AUTHORIZE_STARTED:"mcp_oauth_authorize_started",MCP_OAUTH_AUTHORIZE_AWAITING_SETUP:"mcp_oauth_authorize_awaiting_setup",MCP_OAUTH_TOKEN_ISSUED:"mcp_oauth_token_issued",MCP_OAUTH_TOKEN_REFRESH_ROTATED:"mcp_oauth_token_refresh_rotated",MCP_OAUTH_TOKEN_REVOKED:"mcp_oauth_token_revoked",MCP_AUTH_UPSTREAM_CONNECT_REQUIRED:"mcp_auth_upstream_connect_required",MCP_AUTH_UPSTREAM_CONNECT_STARTED:"mcp_auth_upstream_connect_started",MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED:"mcp_auth_upstream_callback_received",MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED:"mcp_auth_upstream_token_exchange_succeeded",MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED:"mcp_auth_upstream_token_exchange_failed",MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED:"mcp_auth_upstream_credential_resolved",MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING:"mcp_auth_upstream_credential_missing",MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED:"mcp_auth_upstream_reconsent_required",GRAPHQL_OPERATION:"graphql_operation",CACHE_OPERATION:"cache_operation"};var i=class{static{a(this,"BaseAnalyticsEvent")}eventId;requestId;timestamp;accountName;projectName;deploymentName;unit;value;constructor(e){this.eventId=e.eventId,this.requestId=e.requestId,this.timestamp=e.timestamp??new Date,this.accountName=e.accountName,this.projectName=e.projectName,this.deploymentName=e.deploymentName,this.unit=e.unit,this.value=e.value}};var s=class extends i{static{a(this,"AiGatewayBlockedCountEvent")}eventType=t.AI_GATEWAY_BLOCKED_COUNT;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.type||!this.metadata.type.trim())&&(this.metadata.type="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var p=class extends i{static{a(this,"AiGatewayCostSumEvent")}eventType=t.AI_GATEWAY_COST_SUM;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.model||!this.metadata.model.trim())&&(this.metadata.model="unknown"),(!this.metadata.provider||!this.metadata.provider.trim())&&(this.metadata.provider="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var _=class extends i{static{a(this,"AiGatewayFallbackCountEvent")}eventType=t.AI_GATEWAY_FALLBACK_COUNT;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.type||!this.metadata.type.trim())&&(this.metadata.type="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var l=class extends i{static{a(this,"AiGatewayLatencyHistogramEvent")}eventType=t.AI_GATEWAY_LATENCY_HISTOGRAM;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.model||!this.metadata.model.trim())&&(this.metadata.model="unknown"),(!this.metadata.provider||!this.metadata.provider.trim())&&(this.metadata.provider="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var T=class extends i{static{a(this,"AiGatewayRequestCountEvent")}eventType=t.AI_GATEWAY_REQUEST_COUNT;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.model||!this.metadata.model.trim())&&(this.metadata.model="unknown"),(!this.metadata.provider||!this.metadata.provider.trim())&&(this.metadata.provider="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var u=class extends i{static{a(this,"AiGatewayTokenSumEvent")}eventType=t.AI_GATEWAY_TOKEN_SUM;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.model||!this.metadata.model.trim())&&(this.metadata.model="unknown"),(!this.metadata.provider||!this.metadata.provider.trim())&&(this.metadata.provider="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var A=class extends i{static{a(this,"AiGatewayWarningCountEvent")}eventType=t.AI_GATEWAY_WARNING_COUNT;metadata;constructor(e){super(e),this.metadata=e.metadata,(!this.metadata.type||!this.metadata.type.trim())&&(this.metadata.type="unknown"),(!this.metadata.configId||!this.metadata.configId.trim())&&(this.metadata.configId="unknown")}};var m=class extends i{static{a(this,"CacheOperationEvent")}eventType=t.CACHE_OPERATION;metadata;constructor(e){super(e),this.metadata=e.metadata}};var c=class extends i{static{a(this,"GraphqlOperationEvent")}eventType=t.GRAPHQL_OPERATION;metadata;constructor(e){super(e),this.metadata=e.metadata}};var d=class extends i{static{a(this,"McpEvent")}eventType;metadata;constructor(e){super(e),this.eventType=e.eventType,this.metadata=e.metadata}};var r=a(n=>e=>new d({...e,eventType:n}),"buildMcpEvent"),g={[t.AI_GATEWAY_COST_SUM]:n=>new p(n),[t.AI_GATEWAY_REQUEST_COUNT]:n=>new T(n),[t.AI_GATEWAY_TOKEN_SUM]:n=>new u(n),[t.AI_GATEWAY_LATENCY_HISTOGRAM]:n=>new l(n),[t.AI_GATEWAY_WARNING_COUNT]:n=>new A(n),[t.AI_GATEWAY_BLOCKED_COUNT]:n=>new s(n),[t.AI_GATEWAY_FALLBACK_COUNT]:n=>new _(n),[t.MCP_REQUEST_RECEIVED]:r(t.MCP_REQUEST_RECEIVED),[t.MCP_REQUEST_COMPLETED]:r(t.MCP_REQUEST_COMPLETED),[t.MCP_REQUEST_REJECTED]:r(t.MCP_REQUEST_REJECTED),[t.MCP_INITIALIZE_NEGOTIATED]:r(t.MCP_INITIALIZE_NEGOTIATED),[t.MCP_CLIENT_UNSUPPORTED_BEHAVIOR]:r(t.MCP_CLIENT_UNSUPPORTED_BEHAVIOR),[t.MCP_CAPABILITY_LISTED]:r(t.MCP_CAPABILITY_LISTED),[t.MCP_CAPABILITY_INVOKED]:r(t.MCP_CAPABILITY_INVOKED),[t.MCP_CAPABILITY_COMPLETED]:r(t.MCP_CAPABILITY_COMPLETED),[t.MCP_CAPABILITY_FAILED]:r(t.MCP_CAPABILITY_FAILED),[t.MCP_CAPABILITY_CONNECT_REQUIRED]:r(t.MCP_CAPABILITY_CONNECT_REQUIRED),[t.MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED]:r(t.MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED),[t.MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED]:r(t.MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED),[t.MCP_OAUTH_CLIENT_REGISTERED]:r(t.MCP_OAUTH_CLIENT_REGISTERED),[t.MCP_OAUTH_AUTHORIZE_STARTED]:r(t.MCP_OAUTH_AUTHORIZE_STARTED),[t.MCP_OAUTH_AUTHORIZE_AWAITING_SETUP]:r(t.MCP_OAUTH_AUTHORIZE_AWAITING_SETUP),[t.MCP_OAUTH_TOKEN_ISSUED]:r(t.MCP_OAUTH_TOKEN_ISSUED),[t.MCP_OAUTH_TOKEN_REFRESH_ROTATED]:r(t.MCP_OAUTH_TOKEN_REFRESH_ROTATED),[t.MCP_OAUTH_TOKEN_REVOKED]:r(t.MCP_OAUTH_TOKEN_REVOKED),[t.MCP_AUTH_UPSTREAM_CONNECT_REQUIRED]:r(t.MCP_AUTH_UPSTREAM_CONNECT_REQUIRED),[t.MCP_AUTH_UPSTREAM_CONNECT_STARTED]:r(t.MCP_AUTH_UPSTREAM_CONNECT_STARTED),[t.MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED]:r(t.MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED),[t.MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED]:r(t.MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED),[t.MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED]:r(t.MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED),[t.MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED]:r(t.MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED),[t.MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING]:r(t.MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING),[t.MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED]:r(t.MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED),[t.GRAPHQL_OPERATION]:n=>new c(n),[t.CACHE_OPERATION]:n=>new m(n)};function I(n,e){let E=g[n];return E(e)}a(I,"createAnalyticsEvent");var O=class{static{a(this,"ZuploGatewayAnalyticsContext")}#t;#e;constructor(e){this.#t=[],this.#e=e}addAnalyticsEvent(e,E,y,C,M){let v=this.createAnalyticsEvent(e,E,y,C,M);this.#t.push(v)}flushAnalyticsEvents(){let e=[...this.#t];return this.#t.length=0,e}getAnalyticsEvents(){return[...this.#t]}createAnalyticsEvent(e,E,y,C,M){return I(E,{eventId:M??crypto.randomUUID(),requestId:this.#e,accountName:o.instance.accountName??"unknown",projectName:o.instance.projectName??"unknown",deploymentName:o.instance.deploymentName??"unknown",metadata:y,unit:C,value:e})}};export{t as a,O as b};
+//# sourceMappingURL=chunk-EJIF2ZML.js.map

package/node_modules/@zuplo/runtime/out/esm/chunk-EJIF2ZML.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["@zuplo/runtime/metrics/v2/interfaces.ts","@zuplo/runtime/metrics/v2/events/base-analytics-event.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-blocked-count.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-cost-sum.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-fallback-count.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-latency-histogram.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-request-count.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-token-sum.ts","@zuplo/runtime/metrics/v2/events/ai-gateway-warning-count.ts","@zuplo/runtime/metrics/v2/events/cache-operation.ts","@zuplo/runtime/metrics/v2/events/graphql-operation-event.ts","@zuplo/runtime/metrics/v2/events/mcp-event.ts","@zuplo/runtime/metrics/v2/create-events.ts","@zuplo/runtime/metrics/v2/analytics-context.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;2EAuDO,IAAMA,EAAY,CACvB,oBAAqB,sBACrB,yBAA0B,2BAC1B,qBAAsB,uBACtB,6BAA8B,+BAC9B,yBAA0B,2BAC1B,yBAA0B,2BAC1B,0BAA2B,4BAM3B,qBAAsB,uBACtB,sBAAuB,wBACvB,qBAAsB,uBACtB,0BAA2B,4BAC3B,gCAAiC,kCACjC,sBAAuB,wBACvB,uBAAwB,yBACxB,yBAA0B,2BAC1B,sBAAuB,wBACvB,gCAAiC,kCACjC,oCAAqC,sCACrC,mCAAoC,qCACpC,4BAA6B,8BAC7B,4BAA6B,8BAC7B,mCAAoC,qCACpC,uBAAwB,yBACxB,gCAAiC,kCACjC,wBAAyB,0BACzB,mCAAoC,qCACpC,kCAAmC,oCACnC,oCAAqC,sCACrC,2CACE,6CACF,wCACE,0CACF,sCACE,wCACF,qCAAsC,uCACtC,qCAAsC,uCAKtC,kBAAmB,oBAKnB,gBAAiB,iBACnB,EChGO,IAAeC,EAAf,KAEP,CAbA,MAaA,CAAAC,EAAA,2BAEE,QACA,UAIA,UAGA,YACA,YACA,eASA,KACA,MAEA,YAAYC,EAA8B,CACxC,KAAK,QAAUA,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,UAAYA,EAAQ,WAAa,IAAI,KAC1C,KAAK,YAAcA,EAAQ,YAC3B,KAAK,YAAcA,EAAQ,YAC3B,KAAK,eAAiBA,EAAQ,eAC9B,KAAK,KAAOA,EAAQ,KACpB,KAAK,MAAQA,EAAQ,KACvB,CACF,EC/BO,IAAMC,EAAN,cAAyCC,CAA0C,CAhB1F,MAgB0F,CAAAC,EAAA,mCAC/E,UAAYC,EAAU,yBAC/B,SAEA,YAAYC,EAAkD,CAC5D,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,MAAQ,CAAC,KAAK,SAAS,KAAK,KAAK,KAClD,KAAK,SAAS,KAAO,YAEnB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECdO,IAAMC,EAAN,cAAoCC,CAA6C,CAjBxF,MAiBwF,CAAAC,EAAA,8BAC7E,UAAYC,EAAU,oBAC/B,SAEA,YAAYC,EAAqD,CAC/D,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,OAAS,CAAC,KAAK,SAAS,MAAM,KAAK,KACpD,KAAK,SAAS,MAAQ,YAEpB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,YAEvB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECnBO,IAAMC,EAAN,cAA0CC,CAA2C,CAhB5F,MAgB4F,CAAAC,EAAA,oCACjF,UAAYC,EAAU,0BAC/B,SAEA,YAAYC,EAAmD,CAC7D,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,MAAQ,CAAC,KAAK,SAAS,KAAK,KAAK,KAClD,KAAK,SAAS,KAAO,YAEnB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECdO,IAAMC,EAAN,cAA6CC,CAAsD,CAjB1G,MAiB0G,CAAAC,EAAA,uCAC/F,UAAYC,EAAU,6BAC/B,SAEA,YAAYC,EAA8D,CACxE,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,OAAS,CAAC,KAAK,SAAS,MAAM,KAAK,KACpD,KAAK,SAAS,MAAQ,YAEpB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,YAEvB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECfO,IAAMC,EAAN,cAAyCC,CAAkD,CApBlG,MAoBkG,CAAAC,EAAA,mCACvF,UAAYC,EAAU,yBAC/B,SAEA,YAAYC,EAA0D,CACpE,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,OAAS,CAAC,KAAK,SAAS,MAAM,KAAK,KACpD,KAAK,SAAS,MAAQ,YAEpB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,YAEvB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECnBO,IAAMC,EAAN,cAAqCC,CAA8C,CAnB1F,MAmB0F,CAAAC,EAAA,+BAC/E,UAAYC,EAAU,qBAC/B,SAEA,YAAYC,EAAsD,CAChE,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,OAAS,CAAC,KAAK,SAAS,MAAM,KAAK,KACpD,KAAK,SAAS,MAAQ,YAEpB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,YAEvB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECrBO,IAAMC,EAAN,cAAyCC,CAA0C,CAhB1F,MAgB0F,CAAAC,EAAA,mCAC/E,UAAYC,EAAU,yBAC/B,SAEA,YAAYC,EAAkD,CAC5D,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,UAEpB,CAAC,KAAK,SAAS,MAAQ,CAAC,KAAK,SAAS,KAAK,KAAK,KAClD,KAAK,SAAS,KAAO,YAEnB,CAAC,KAAK,SAAS,UAAY,CAAC,KAAK,SAAS,SAAS,KAAK,KAC1D,KAAK,SAAS,SAAW,UAE7B,CACF,ECuBO,IAAMC,EAAN,cAAkCC,CAA2C,CAtDpF,MAsDoF,CAAAC,EAAA,4BACzE,UAAYC,EAAU,gBAC/B,SAEA,YAAYC,EAAmD,CAC7D,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,QAC1B,CACF,ECwGO,IAAMC,EAAN,cAAoCC,CAA6C,CAtKxF,MAsKwF,CAAAC,EAAA,8BAC7E,UAAYC,EAAU,kBAC/B,SAEA,YAAYC,EAAuC,CACjD,MAAMA,CAAO,EACb,KAAK,SAAWA,EAAQ,QAC1B,CACF,EC0DO,IAAMC,EAAN,cAAuBC,CAAqC,CAxOnE,MAwOmE,CAAAC,EAAA,iBACxD,UACT,SAEA,YAAYC,EAA0B,CACpC,MAAMA,CAAO,EACb,KAAK,UAAYA,EAAQ,UACzB,KAAK,SAAWA,EAAQ,QAC1B,CACF,ECzNA,IAAMC,EAAgBC,EACpBC,GAEQC,GACN,IAAIC,EAAS,CAAE,GAAGD,EAAS,UAAAD,CAAU,CAAC,EAJpB,iBAOhBG,EAAgB,CACpB,CAACC,EAAU,mBAAmB,EAAIH,GAChC,IAAII,EAAsBJ,CAAO,EACnC,CAACG,EAAU,wBAAwB,EAAIH,GACrC,IAAIK,EAA2BL,CAAO,EACxC,CAACG,EAAU,oBAAoB,EAAIH,GACjC,IAAIM,EAAuBN,CAAO,EACpC,CAACG,EAAU,4BAA4B,EAAIH,GACzC,IAAIO,EAA+BP,CAAO,EAC5C,CAACG,EAAU,wBAAwB,EAAIH,GACrC,IAAIQ,EAA2BR,CAAO,EACxC,CAACG,EAAU,wBAAwB,EAAIH,GACrC,IAAIS,EAA2BT,CAAO,EACxC,CAACG,EAAU,yBAAyB,EAAIH,GACtC,IAAIU,EAA4BV,CAAO,EAEzC,CAACG,EAAU,oBAAoB,EAAGN,EAChCM,EAAU,oBACZ,EACA,CAACA,EAAU,qBAAqB,EAAGN,EACjCM,EAAU,qBACZ,EACA,CAACA,EAAU,oBAAoB,EAAGN,EAChCM,EAAU,oBACZ,EACA,CAACA,EAAU,yBAAyB,EAAGN,EACrCM,EAAU,yBACZ,EACA,CAACA,EAAU,+BAA+B,EAAGN,EAC3CM,EAAU,+BACZ,EACA,CAACA,EAAU,qBAAqB,EAAGN,EACjCM,EAAU,qBACZ,EACA,CAACA,EAAU,sBAAsB,EAAGN,EAClCM,EAAU,sBACZ,EACA,CAACA,EAAU,wBAAwB,EAAGN,EACpCM,EAAU,wBACZ,EACA,CAACA,EAAU,qBAAqB,EAAGN,EACjCM,EAAU,qBACZ,EACA,CAACA,EAAU,+BAA+B,EAAGN,EAC3CM,EAAU,+BACZ,EACA,CAACA,EAAU,mCAAmC,EAAGN,EAC/CM,EAAU,mCACZ,EACA,CAACA,EAAU,kCAAkC,EAAGN,EAC9CM,EAAU,kCACZ,EACA,CAACA,EAAU,2BAA2B,EAAGN,EACvCM,EAAU,2BACZ,EACA,CAACA,EAAU,2BAA2B,EAAGN,EACvCM,EAAU,2BACZ,EACA,CAACA,EAAU,kCAAkC,EAAGN,EAC9CM,EAAU,kCACZ,EACA,CAACA,EAAU,sBAAsB,EAAGN,EAClCM,EAAU,sBACZ,EACA,CAACA,EAAU,+BAA+B,EAAGN,EAC3CM,EAAU,+BACZ,EACA,CAACA,EAAU,uBAAuB,EAAGN,EACnCM,EAAU,uBACZ,EACA,CAACA,EAAU,kCAAkC,EAAGN,EAC9CM,EAAU,kCACZ,EACA,CAACA,EAAU,iCAAiC,EAAGN,EAC7CM,EAAU,iCACZ,EACA,CAACA,EAAU,mCAAmC,EAAGN,EAC/CM,EAAU,mCACZ,EACA,CAACA,EAAU,0CAA0C,EAAGN,EACtDM,EAAU,0CACZ,EACA,CAACA,EAAU,uCAAuC,EAAGN,EACnDM,EAAU,uCACZ,EACA,CAACA,EAAU,qCAAqC,EAAGN,EACjDM,EAAU,qCACZ,EACA,CAACA,EAAU,oCAAoC,EAAGN,EAChDM,EAAU,oCACZ,EACA,CAACA,EAAU,oCAAoC,EAAGN,EAChDM,EAAU,oCACZ,EAEA,CAACA,EAAU,iBAAiB,EAAIH,GAC9B,IAAIW,EAAsBX,CAAO,EAEnC,CAACG,EAAU,eAAe,EAAIH,GAAY,IAAIY,EAAoBZ,CAAO,CAC3E,EAOO,SAASa,EACdd,EACAC,EAC0B,CAC1B,IAAMc,EAAUZ,EAAcH,CAAS,EACvC,OAAOe,EAAQd,CAAO,CACxB,CANgBF,EAAAe,EAAA,wBC9HT,IAAME,EAAN,KAAoE,CAX3E,MAW2E,CAAAC,EAAA,qCAGhEC,GACAC,GAET,YAAYC,EAAmB,CAC7B,KAAKF,GAAU,CAAC,EAChB,KAAKC,GAAaC,CACpB,CAGA,kBACEC,EACAC,EACAC,EACAC,EACAC,EACM,CACN,IAAMC,EAAQ,KAAK,qBACjBL,EACAC,EACAC,EACAC,EACAC,CACF,EACA,KAAKP,GAAQ,KAAKQ,CAAK,CACzB,CAEA,sBAA8C,CAC5C,IAAMC,EAAS,CAAC,GAAG,KAAKT,EAAO,EAC/B,YAAKA,GAAQ,OAAS,EACfS,CACT,CAEA,oBAA4C,CAC1C,MAAO,CAAC,GAAG,KAAKT,EAAO,CACzB,CAEQ,qBACNG,EACAC,EACAC,EACAC,EACAC,EAC0B,CAC1B,OAAOG,EAAqBN,EAAW,CACrC,QAASG,GAAW,OAAO,WAAW,EACtC,UAAW,KAAKN,GAChB,YAAaU,EAAY,SAAS,aAAe,UACjD,YAAaA,EAAY,SAAS,aAAe,UACjD,eAAgBA,EAAY,SAAS,gBAAkB,UACvD,SAAAN,EACA,KAAAC,EACA,MAAAH,CACF,CAAC,CACH,CACF","names":["EventType","BaseAnalyticsEvent","__name","options","AiGatewayBlockedCountEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayCostSumEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayFallbackCountEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayLatencyHistogramEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayRequestCountEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayTokenSumEvent","BaseAnalyticsEvent","__name","EventType","options","AiGatewayWarningCountEvent","BaseAnalyticsEvent","__name","EventType","options","CacheOperationEvent","BaseAnalyticsEvent","__name","EventType","options","GraphqlOperationEvent","BaseAnalyticsEvent","__name","EventType","options","McpEvent","BaseAnalyticsEvent","__name","options","buildMcpEvent","__name","eventType","options","McpEvent","eventBuilders","EventType","AiGatewayCostSumEvent","AiGatewayRequestCountEvent","AiGatewayTokenSumEvent","AiGatewayLatencyHistogramEvent","AiGatewayWarningCountEvent","AiGatewayBlockedCountEvent","AiGatewayFallbackCountEvent","GraphqlOperationEvent","CacheOperationEvent","createAnalyticsEvent","builder","ZuploGatewayAnalyticsContext","__name","#events","#requestId","requestId","value","eventType","metadata","unit","eventId","event","events","createAnalyticsEvent","Environment"]}