@zuplo/cli 6.72.15 → 6.72.17

package/node_modules/@zuplo/runtime/out/types/mcp/messages/index.d.ts

@@ -0,0 +1,2439 @@
+/**
+ * Base logger interface with methods for each log level.
+ * @beta
+ */
+declare interface BaseLogger {
+  debug(...messages: unknown[]): void;
+  info(...messages: unknown[]): void;
+  log(...messages: unknown[]): void;
+  warn(...messages: unknown[]): void;
+  error(...messages: unknown[]): void;
+}
+
+/**
+ * @public
+ */
+declare interface BuildRouteConfiguration {
+  path: string;
+  methods: HttpMethod[];
+  /**
+   * @deprecated This property is not used and will be removed in future versions
+   */
+  label?: string;
+  /**
+   * @deprecated This property is not used and will be removed in future versions
+   */
+  key?: string;
+  handler: HandlerDefinition;
+  corsPolicy?: CorsPolicy;
+  /**
+   * @deprecated This property is deprecated. Use route.raw() instead.
+   */
+  custom?: any;
+  mcp?: {
+    enabled?: boolean;
+  };
+  policies?: {
+    inbound?: string[];
+    outbound?: string[];
+  };
+  /**
+   * @deprecated This property is not used and will be removed in future versions
+   */
+  excludeFromOpenApi?: boolean;
+  pathPattern?: string;
+  /**
+   * Build-time metadata for this route.
+   */
+  metadata?: {
+    /**
+     * The source file this route was generated from.
+     */
+    filepath: string;
+  };
+  /* Excluded from this release type: raw */
+}
+
+/**
+ * The 2-letter continent codes Cloudflare uses
+ * @public
+ */
+declare type ContinentCode = "AF" | "AN" | "AS" | "EU" | "NA" | "OC" | "SA";
+
+/**
+ * @public
+ */
+declare type CorsPolicy = string | "anything-goes" | "none";
+
+/**
+ * Answer an MCP envelope with a JSON-RPC error, protocol-correctly.
+ *
+ * The two-argument form rejects the whole envelope: every request id gets
+ * `error`. The three-argument form targets one request: the named message
+ * gets `error` and every other request gets `-32001 Not processed`. In both
+ * forms invalid members are answered with their own parse error,
+ * notifications get no reply entry, and the wire shape (single object vs
+ * batch array) mirrors the incoming envelope.
+ *
+ * @beta
+ */
+export declare function createErrorResponse(
+  envelope: McpEnvelope,
+  error: McpErrorDetail
+): Response;
+
+export declare function createErrorResponse(
+  envelope: McpEnvelope,
+  message: McpAnyRequestMessage,
+  error: McpErrorDetail
+): Response;
+
+/**
+ * Answer an MCP envelope's only request with a JSON-RPC result, without
+ * calling the upstream. Throws when the envelope contains more than one
+ * request — answering one request of a batch requires the partial-forwarding
+ * engine (`processMessages`), not a whole-exchange response.
+ *
+ * @beta
+ */
+export declare function createResultResponse(
+  envelope: McpEnvelope,
+  message: McpAnyRequestMessage,
+  result: McpResult
+): Response;
+
+declare const EventType: {
+  readonly AI_GATEWAY_COST_SUM: "ai_gateway_cost_sum";
+  readonly AI_GATEWAY_REQUEST_COUNT: "ai_gateway_request_count";
+  readonly AI_GATEWAY_TOKEN_SUM: "ai_gateway_token_sum";
+  readonly AI_GATEWAY_LATENCY_HISTOGRAM: "ai_gateway_latency_histogram";
+  readonly AI_GATEWAY_WARNING_COUNT: "ai_gateway_warning_count";
+  readonly AI_GATEWAY_BLOCKED_COUNT: "ai_gateway_blocked_count";
+  readonly AI_GATEWAY_FALLBACK_COUNT: "ai_gateway_fallback_count";
+  readonly MCP_REQUEST_RECEIVED: "mcp_request_received";
+  readonly MCP_REQUEST_COMPLETED: "mcp_request_completed";
+  readonly MCP_REQUEST_REJECTED: "mcp_request_rejected";
+  readonly MCP_INITIALIZE_NEGOTIATED: "mcp_initialize_negotiated";
+  readonly MCP_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_client_unsupported_behavior";
+  readonly MCP_CAPABILITY_LISTED: "mcp_capability_listed";
+  readonly MCP_CAPABILITY_INVOKED: "mcp_capability_invoked";
+  readonly MCP_CAPABILITY_COMPLETED: "mcp_capability_completed";
+  readonly MCP_CAPABILITY_FAILED: "mcp_capability_failed";
+  readonly MCP_CAPABILITY_CONNECT_REQUIRED: "mcp_capability_connect_required";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_auth_downstream_token_validated";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_auth_downstream_token_rejected";
+  readonly MCP_OAUTH_CLIENT_REGISTERED: "mcp_oauth_client_registered";
+  readonly MCP_OAUTH_AUTHORIZE_STARTED: "mcp_oauth_authorize_started";
+  readonly MCP_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_oauth_authorize_awaiting_setup";
+  readonly MCP_OAUTH_TOKEN_ISSUED: "mcp_oauth_token_issued";
+  readonly MCP_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_oauth_token_refresh_rotated";
+  readonly MCP_OAUTH_TOKEN_REVOKED: "mcp_oauth_token_revoked";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_auth_upstream_connect_required";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_auth_upstream_connect_started";
+  readonly MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_auth_upstream_callback_received";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_auth_upstream_token_exchange_succeeded";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_auth_upstream_token_exchange_failed";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_auth_upstream_credential_resolved";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_auth_upstream_credential_missing";
+  readonly MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_auth_upstream_reconsent_required";
+  readonly GRAPHQL_OPERATION: "graphql_operation";
+  readonly CACHE_OPERATION: "cache_operation";
+};
+
+declare type EventType = (typeof EventType)[keyof typeof EventType];
+
+/**
+ * Parse a request body as MCP (JSON-RPC) messages.
+ *
+ * Returns `null` when the body is not MCP-shaped — wrong content type, not
+ * valid JSON, no `jsonrpc: "2.0"` marker, or larger than the parse limit —
+ * so policies can let non-MCP traffic pass through untouched.
+ *
+ * The parse is cached per request instance: any number of policies can call
+ * this on the same request and the body is read and classified once.
+ *
+ * @beta
+ */
+export declare function getRequest(
+  request: Request
+): Promise<McpEnvelope | null>;
+
+/**
+ * @public
+ */
+declare interface HandlerDefinition {
+  module: any;
+  export: string;
+  options?: unknown;
+}
+
+declare type HandlerResult = McpMessageVerdict | Promise<McpMessageVerdict>;
+
+/**
+ * @public
+ */
+declare type HttpMethod =
+  | "GET"
+  | "HEAD"
+  | "POST"
+  | "PUT"
+  | "DELETE"
+  | "CONNECT"
+  | "OPTIONS"
+  | "TRACE"
+  | "PATCH";
+
+/**
+ * @beta
+ */
+declare enum HttpStatusCode {
+  /**
+   * The server has received the request headers and the client should proceed to send the request body
+   * (in the case of a request for which a body needs to be sent; for example, a POST request).
+   * Sending a large request body to a server after a request has been rejected for inappropriate headers would be inefficient.
+   * To have a server check the request's headers, a client must send Expect: 100-continue as a header in its initial request
+   * and receive a 100 Continue status code in response before sending the body. The response 417 Expectation Failed indicates the request should not be continued.
+   */
+  CONTINUE = 100,
+  /**
+   * The requester has asked the server to switch protocols and the server has agreed to do so.
+   */
+  SWITCHING_PROTOCOLS = 101,
+  /**
+   * A WebDAV request may contain many sub-requests involving file operations, requiring a long time to complete the request.
+   * This code indicates that the server has received and is processing the request, but no response is available yet.
+   * This prevents the client from timing out and assuming the request was lost.
+   * @deprecated This status code is deprecated and shouldn't be sent any more. Clients may still accept it, but simply ignore them.
+   */
+  PROCESSING = 102,
+  /**
+   * This response may be sent by a server while it is still preparing a
+   * response, with hints about the resources that the server is expecting
+   * the final response will link. This allows a browser to start preloading
+   * resources even before the server has prepared and sent that final response.
+   */
+  EARLY_HINTS = 103,
+  /**
+   * Standard response for successful HTTP requests.
+   * The actual response will depend on the request method used.
+   * In a GET request, the response will contain an entity corresponding to the requested resource.
+   * In a POST request, the response will contain an entity describing or containing the result of the action.
+   */
+  OK = 200,
+  /**
+   * The request has been fulfilled, resulting in the creation of a new resource.
+   */
+  CREATED = 201,
+  /**
+   * The request has been accepted for processing, but the processing has not been completed.
+   * The request might or might not be eventually acted upon, and may be disallowed when processing occurs.
+   */
+  ACCEPTED = 202,
+  /**
+   * SINCE HTTP/1.1
+   * The server is a transforming proxy that received a 200 OK from its origin,
+   * but is returning a modified version of the origin's response.
+   */
+  NON_AUTHORITATIVE_INFORMATION = 203,
+  /**
+   * The server successfully processed the request and is not returning any content.
+   */
+  NO_CONTENT = 204,
+  /**
+   * The server successfully processed the request, but is not returning any content.
+   * Unlike a 204 response, this response requires that the requester reset the document view.
+   */
+  RESET_CONTENT = 205,
+  /**
+   * The server is delivering only part of the resource (byte serving) due to a range header sent by the client.
+   * The range header is used by HTTP clients to enable resuming of interrupted downloads,
+   * or split a download into multiple simultaneous streams.
+   */
+  PARTIAL_CONTENT = 206,
+  /**
+   * The message body that follows is an XML message and can contain a number of separate response codes,
+   * depending on how many sub-requests were made.
+   */
+  MULTI_STATUS = 207,
+  /**
+   * The members of a DAV binding have already been enumerated in a preceding part of the (multistatus) response,
+   * and are not being included again.
+   */
+  ALREADY_REPORTED = 208,
+  /**
+   * The server has fulfilled a request for the resource,
+   * and the response is a representation of the result of one or more instance-manipulations applied to the current instance.
+   */
+  IM_USED = 226,
+  /**
+   * Indicates multiple options for the resource from which the client may choose (via agent-driven content negotiation).
+   * For example, this code could be used to present multiple video format options,
+   * to list files with different filename extensions, or to suggest word-sense disambiguation.
+   */
+  MULTIPLE_CHOICES = 300,
+  /**
+   * This and all future requests should be directed to the given URI.
+   */
+  MOVED_PERMANENTLY = 301,
+  /**
+   * This is an example of industry practice contradicting the standard.
+   * The HTTP/1.0 specification (RFC 1945) required the client to perform a temporary redirect
+   * (the original describing phrase was "Moved Temporarily"), but popular browsers implemented 302
+   * with the functionality of a 303 See Other. Therefore, HTTP/1.1 added status codes 303 and 307
+   * to distinguish between the two behaviours. However, some Web applications and frameworks
+   * use the 302 status code as if it were the 303.
+   */
+  FOUND = 302,
+  /**
+   * SINCE HTTP/1.1
+   * The response to the request can be found under another URI using a GET method.
+   * When received in response to a POST (or PUT/DELETE), the client should presume that
+   * the server has received the data and should issue a redirect with a separate GET message.
+   */
+  SEE_OTHER = 303,
+  /**
+   * Indicates that the resource has not been modified since the version specified by the request headers If-Modified-Since or If-None-Match.
+   * In such case, there is no need to retransmit the resource since the client still has a previously-downloaded copy.
+   */
+  NOT_MODIFIED = 304,
+  /**
+   * SINCE HTTP/1.1
+   * The requested resource is available only through a proxy, the address for which is provided in the response.
+   * Many HTTP clients (such as Mozilla and Internet Explorer) do not correctly handle responses with this status code, primarily for security reasons.
+   */
+  USE_PROXY = 305,
+  /**
+   * No longer used. Originally meant "Subsequent requests should use the specified proxy."
+   * @deprecated No longer used
+   */
+  SWITCH_PROXY = 306,
+  /**
+   * SINCE HTTP/1.1
+   * In this case, the request should be repeated with another URI; however, future requests should still use the original URI.
+   * In contrast to how 302 was historically implemented, the request method is not allowed to be changed when reissuing the original request.
+   * For example, a POST request should be repeated using another POST request.
+   */
+  TEMPORARY_REDIRECT = 307,
+  /**
+   * The request and all future requests should be repeated using another URI.
+   * 307 and 308 parallel the behaviors of 302 and 301, but do not allow the HTTP method to change.
+   * So, for example, submitting a form to a permanently redirected resource may continue smoothly.
+   */
+  PERMANENT_REDIRECT = 308,
+  /**
+   * The server cannot or will not process the request due to an apparent client error
+   * (e.g., malformed request syntax, too large size, invalid request message framing, or deceptive request routing).
+   */
+  BAD_REQUEST = 400,
+  /**
+   * Similar to 403 Forbidden, but specifically for use when authentication is required and has failed or has not yet
+   * been provided. The response must include a WWW-Authenticate header field containing a challenge applicable to the
+   * requested resource. See Basic access authentication and Digest access authentication. 401 semantically means
+   * "unauthenticated",i.e. the user does not have the necessary credentials.
+   */
+  UNAUTHORIZED = 401,
+  /**
+   * Reserved for future use. The original intention was that this code might be used as part of some form of digital
+   * cash or micro payment scheme, but that has not happened, and this code is not usually used.
+   * Google Developers API uses this status if a particular developer has exceeded the daily limit on requests.
+   */
+  PAYMENT_REQUIRED = 402,
+  /**
+   * The request was valid, but the server is refusing action.
+   * The user might not have the necessary permissions for a resource.
+   */
+  FORBIDDEN = 403,
+  /**
+   * The requested resource could not be found but may be available in the future.
+   * Subsequent requests by the client are permissible.
+   */
+  NOT_FOUND = 404,
+  /**
+   * A request method is not supported for the requested resource;
+   * for example, a GET request on a form that requires data to be presented via POST, or a PUT request on a read-only resource.
+   */
+  METHOD_NOT_ALLOWED = 405,
+  /**
+   * The requested resource is capable of generating only content not acceptable according to the Accept headers sent in the request.
+   */
+  NOT_ACCEPTABLE = 406,
+  /**
+   * The client must first authenticate itself with the proxy.
+   */
+  PROXY_AUTHENTICATION_REQUIRED = 407,
+  /**
+   * The server timed out waiting for the request.
+   * According to HTTP specifications:
+   * "The client did not produce a request within the time that the server was prepared to wait. The client MAY repeat the request without modifications at any later time."
+   */
+  REQUEST_TIMEOUT = 408,
+  /**
+   * Indicates that the request could not be processed because of conflict in the request,
+   * such as an edit conflict between multiple simultaneous updates.
+   */
+  CONFLICT = 409,
+  /**
+   * Indicates that the resource requested is no longer available and will not be available again.
+   * This should be used when a resource has been intentionally removed and the resource should be purged.
+   * Upon receiving a 410 status code, the client should not request the resource in the future.
+   * Clients such as search engines should remove the resource from their indices.
+   * Most use cases do not require clients and search engines to purge the resource, and a "404 Not Found" may be used instead.
+   */
+  GONE = 410,
+  /**
+   * The request did not specify the length of its content, which is required by the requested resource.
+   */
+  LENGTH_REQUIRED = 411,
+  /**
+   * The server does not meet one of the preconditions that the requester put on the request.
+   */
+  PRECONDITION_FAILED = 412,
+  /**
+   * The request is larger than the server is willing or able to process. Previously called "Request Entity Too Large".
+   */
+  CONTENT_TOO_LARGE = 413,
+  /* Excluded from this release type: PAYLOAD_TOO_LARGE */
+  /**
+   * The URI provided was too long for the server to process. Often the result of too much data being encoded as a query-string of a GET request,
+   * in which case it should be converted to a POST request.
+   * Called "Request-URI Too Long" previously.
+   */
+  URI_TOO_LONG = 414,
+  /**
+   * The request entity has a media type which the server or resource does not support.
+   * For example, the client uploads an image as image/svg+xml, but the server requires that images use a different format.
+   */
+  UNSUPPORTED_MEDIA_TYPE = 415,
+  /**
+   * The client has asked for a portion of the file (byte serving), but the server cannot supply that portion.
+   * For example, if the client asked for a part of the file that lies beyond the end of the file.
+   * Called "Requested Range Not Satisfiable" previously.
+   */
+  RANGE_NOT_SATISFIABLE = 416,
+  /**
+   * The server cannot meet the requirements of the Expect request-header field.
+   */
+  EXPECTATION_FAILED = 417,
+  /**
+   * This code was defined in 1998 as one of the traditional IETF April Fools' jokes, in RFC 2324, Hyper Text Coffee Pot Control Protocol,
+   * and is not expected to be implemented by actual HTTP servers. The RFC specifies this code should be returned by
+   * teapots requested to brew coffee. This HTTP status is used as an Easter egg in some websites, including Google.com.
+   */
+  I_AM_A_TEAPOT = 418,
+  /**
+   * The request was directed at a server that is not able to produce a response (for example because a connection reuse).
+   */
+  MISDIRECTED_REQUEST = 421,
+  /* Excluded from this release type: UNPROCESSABLE_ENTITY */
+  /**
+   * The request was well-formed but was unable to be followed due to semantic errors.
+   */
+  UNPROCESSABLE_CONTENT = 422,
+  /**
+   * The resource that is being accessed is locked.
+   */
+  LOCKED = 423,
+  /**
+   * The request failed due to failure of a previous request (e.g., a PROPPATCH).
+   */
+  FAILED_DEPENDENCY = 424,
+  /**
+   * The server is unwilling to risk processing a request that might be
+   * replayed, which creates the potential for a replay attack.
+   */
+  TOO_EARLY = 425,
+  /**
+   * The client should switch to a different protocol such as TLS/1.0, given in the Upgrade header field.
+   */
+  UPGRADE_REQUIRED = 426,
+  /**
+   * The origin server requires the request to be conditional.
+   * Intended to prevent "the 'lost update' problem, where a client
+   * GETs a resource's state, modifies it, and PUTs it back to the server,
+   * when meanwhile a third party has modified the state on the server, leading to a conflict."
+   */
+  PRECONDITION_REQUIRED = 428,
+  /**
+   * The user has sent too many requests in a given amount of time. Intended for use with rate-limiting schemes.
+   */
+  TOO_MANY_REQUESTS = 429,
+  /**
+   * The server is unwilling to process the request because either an individual header field,
+   * or all the header fields collectively, are too large.
+   */
+  REQUEST_HEADER_FIELDS_TOO_LARGE = 431,
+  /**
+   * A server operator has received a legal demand to deny access to a resource or to a set of resources
+   * that includes the requested resource. The code 451 was chosen as a reference to the novel Fahrenheit 451.
+   */
+  UNAVAILABLE_FOR_LEGAL_REASONS = 451,
+  /**
+   * A generic error message, given when an unexpected condition was encountered and no more specific message is suitable.
+   */
+  INTERNAL_SERVER_ERROR = 500,
+  /**
+   * The server either does not recognize the request method, or it lacks the ability to fulfill the request.
+   * Usually this implies future availability (e.g., a new feature of a web-service API).
+   */
+  NOT_IMPLEMENTED = 501,
+  /**
+   * The server was acting as a gateway or proxy and received an invalid response from the upstream server.
+   */
+  BAD_GATEWAY = 502,
+  /**
+   * The server is currently unavailable (because it is overloaded or down for maintenance).
+   * Generally, this is a temporary state.
+   */
+  SERVICE_UNAVAILABLE = 503,
+  /**
+   * The server was acting as a gateway or proxy and did not receive a timely response from the upstream server.
+   */
+  GATEWAY_TIMEOUT = 504,
+  /**
+   * The server does not support the HTTP protocol version used in the request
+   */
+  HTTP_VERSION_NOT_SUPPORTED = 505,
+  /**
+   * Transparent content negotiation for the request results in a circular reference.
+   */
+  VARIANT_ALSO_NEGOTIATES = 506,
+  /**
+   * The server is unable to store the representation needed to complete the request.
+   */
+  INSUFFICIENT_STORAGE = 507,
+  /**
+   * The server detected an infinite loop while processing the request.
+   */
+  LOOP_DETECTED = 508,
+  /**
+   * Further extensions to the request are required for the server to fulfill it.
+   */
+  NOT_EXTENDED = 510,
+  /**
+   * The client needs to authenticate to gain network access.
+   * Intended for use by intercepting proxies used to control access to the network (e.g., "captive portals" used
+   * to require agreement to Terms of Service before granting full Internet access via a Wi-Fi hotspot).
+   */
+  NETWORK_AUTHENTICATION_REQUIRED = 511,
+}
+
+declare type HttpStatusCodeRangeDefinition =
+  | "1XX"
+  | "2XX"
+  | "3XX"
+  | "4XX"
+  | "5XX";
+
+/**
+ * A function-based inbound policy that can modify the incoming HTTP request.
+ * This is the simplest way to create custom policies without extending a class.
+ *
+ * @param request - The incoming Request
+ * @param context - The current context of the Request
+ * @param options - The configuration options for the policy
+ * @param policyName - The name set on the policy in the configuration
+ * @returns A Response to short-circuit or a Request to continue
+ *
+ * @public
+ * @example
+ * ```typescript
+ * import { InboundPolicyHandler } from "@zuplo/runtime";
+ *
+ * interface RateLimitOptions {
+ *   requests: number;
+ *   windowMs: number;
+ * }
+ *
+ * export const rateLimitPolicy: InboundPolicyHandler<RateLimitOptions> = async (
+ *   request,
+ *   context,
+ *   options,
+ *   policyName
+ * ) => {
+ *   const key = request.headers.get("x-api-key") || "anonymous";
+ *   const count = await incrementCounter(key, options.windowMs);
+ *
+ *   if (count > options.requests) {
+ *     return new Response("Too Many Requests", { status: 429 });
+ *   }
+ *
+ *   // Add rate limit headers
+ *   request.headers.set("X-RateLimit-Limit", options.requests.toString());
+ *   request.headers.set("X-RateLimit-Remaining", (options.requests - count).toString());
+ *
+ *   return request;
+ * };
+ * ```
+ */
+declare interface InboundPolicyHandler<TOptions = any> {
+  (
+    request: ZuploRequest,
+    context: ZuploContext,
+    options: TOptions,
+    policyName: string
+  ): Promise<ZuploRequest | Response>;
+}
+
+/**
+ * @public
+ */
+declare interface IncomingRequestProperties {
+  /**
+   * ASN of the incoming request, for example, 395747.
+   */
+  readonly asn: number | undefined;
+  /**
+   * The organization which owns the ASN of the incoming request,
+   * for example, Google Cloud.
+   */
+  readonly asOrganization: string | undefined;
+  /**
+   * City of the incoming request, for example, "Austin".
+   */
+  readonly city: string | undefined;
+  /**
+   * Continent of the incoming request, for example, "NA".
+   */
+  readonly continent: ContinentCode | undefined;
+  /**
+   * The two-letter country code in the request.
+   * @see {@link https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2|ISO 3166-1 alpha-2}
+   */
+  readonly country: Iso3166Alpha2Code | undefined;
+  /**
+   * Latitude of the incoming request, for example, "30.27130".
+   */
+  readonly latitude: string | undefined;
+  /**
+   * Longitude of the incoming request, for example, "-97.74260".
+   */
+  readonly longitude: string | undefined;
+  /**
+   * The three-letter IATA airport code of the data center that the request hit,
+   * for example, "DFW".
+   * @see {@link https://en.wikipedia.org/wiki/IATA_airport_code|IATA airport code}
+   */
+  readonly colo: string | undefined;
+  /**
+   * Postal code of the incoming request, for example, "78701".
+   */
+  readonly postalCode: string | undefined;
+  /**
+   * Metro code (DMA) of the incoming request, for example, "635".
+   */
+  readonly metroCode: string | undefined;
+  /**
+   * If known, the ISO 3166-2 name for the first level region associated with
+   * the IP address of the incoming request, for example, "Texas".
+   * @see {@link https://en.wikipedia.org/wiki/ISO_3166-2|ISO 3166-2}
+   */
+  readonly region: string | undefined;
+  /**
+   * If known, the ISO 3166-2 code for the first-level region associated with
+   * the IP address of the incoming request, for example, "TX".
+   * @see {@link https://en.wikipedia.org/wiki/ISO_3166-2|ISO 3166-2}
+   */
+  readonly regionCode: string | undefined;
+  /**
+   * Timezone of the incoming request, for example, "America/Chicago".
+   */
+  readonly timezone: string | undefined;
+  /**
+   * If available, the HTTP protocol of the incoming request, for example, "HTTP/1.1".
+   */
+  readonly httpProtocol: string | undefined;
+  /* Excluded from this release type: clientCert */
+  /* Excluded from this release type: clientMtlsVerificationStatus */
+  /* Excluded from this release type: clientMtlsVerificationReason */
+  /* Excluded from this release type: clientCertFingerprintSha256 */
+  /* Excluded from this release type: clientCertNotBefore */
+  /* Excluded from this release type: clientCertNotAfter */
+  /* Excluded from this release type: clientCertIssuerDn */
+  /* Excluded from this release type: clientCertSubjectDn */
+}
+
+/**
+ * ISO 3166-1 Alpha-2 codes
+ * @public
+ */
+declare type Iso3166Alpha2Code =
+  | "AD"
+  | "AE"
+  | "AF"
+  | "AG"
+  | "AI"
+  | "AL"
+  | "AM"
+  | "AO"
+  | "AQ"
+  | "AR"
+  | "AS"
+  | "AT"
+  | "AU"
+  | "AW"
+  | "AX"
+  | "AZ"
+  | "BA"
+  | "BB"
+  | "BD"
+  | "BE"
+  | "BF"
+  | "BG"
+  | "BH"
+  | "BI"
+  | "BJ"
+  | "BL"
+  | "BM"
+  | "BN"
+  | "BO"
+  | "BQ"
+  | "BR"
+  | "BS"
+  | "BT"
+  | "BV"
+  | "BW"
+  | "BY"
+  | "BZ"
+  | "CA"
+  | "CC"
+  | "CD"
+  | "CF"
+  | "CG"
+  | "CH"
+  | "CI"
+  | "CK"
+  | "CL"
+  | "CM"
+  | "CN"
+  | "CO"
+  | "CR"
+  | "CU"
+  | "CV"
+  | "CW"
+  | "CX"
+  | "CY"
+  | "CZ"
+  | "DE"
+  | "DJ"
+  | "DK"
+  | "DM"
+  | "DO"
+  | "DZ"
+  | "EC"
+  | "EE"
+  | "EG"
+  | "EH"
+  | "ER"
+  | "ES"
+  | "ET"
+  | "FI"
+  | "FJ"
+  | "FK"
+  | "FM"
+  | "FO"
+  | "FR"
+  | "GA"
+  | "GB"
+  | "GD"
+  | "GE"
+  | "GF"
+  | "GG"
+  | "GH"
+  | "GI"
+  | "GL"
+  | "GM"
+  | "GN"
+  | "GP"
+  | "GQ"
+  | "GR"
+  | "GS"
+  | "GT"
+  | "GU"
+  | "GW"
+  | "GY"
+  | "HK"
+  | "HM"
+  | "HN"
+  | "HR"
+  | "HT"
+  | "HU"
+  | "ID"
+  | "IE"
+  | "IL"
+  | "IM"
+  | "IN"
+  | "IO"
+  | "IQ"
+  | "IR"
+  | "IS"
+  | "IT"
+  | "JE"
+  | "JM"
+  | "JO"
+  | "JP"
+  | "KE"
+  | "KG"
+  | "KH"
+  | "KI"
+  | "KM"
+  | "KN"
+  | "KP"
+  | "KR"
+  | "KW"
+  | "KY"
+  | "KZ"
+  | "LA"
+  | "LB"
+  | "LC"
+  | "LI"
+  | "LK"
+  | "LR"
+  | "LS"
+  | "LT"
+  | "LU"
+  | "LV"
+  | "LY"
+  | "MA"
+  | "MC"
+  | "MD"
+  | "ME"
+  | "MF"
+  | "MG"
+  | "MH"
+  | "MK"
+  | "ML"
+  | "MM"
+  | "MN"
+  | "MO"
+  | "MP"
+  | "MQ"
+  | "MR"
+  | "MS"
+  | "MT"
+  | "MU"
+  | "MV"
+  | "MW"
+  | "MX"
+  | "MY"
+  | "MZ"
+  | "NA"
+  | "NC"
+  | "NE"
+  | "NF"
+  | "NG"
+  | "NI"
+  | "NL"
+  | "NO"
+  | "NP"
+  | "NR"
+  | "NU"
+  | "NZ"
+  | "OM"
+  | "PA"
+  | "PE"
+  | "PF"
+  | "PG"
+  | "PH"
+  | "PK"
+  | "PL"
+  | "PM"
+  | "PN"
+  | "PR"
+  | "PS"
+  | "PT"
+  | "PW"
+  | "PY"
+  | "QA"
+  | "RE"
+  | "RO"
+  | "RS"
+  | "RU"
+  | "RW"
+  | "SA"
+  | "SB"
+  | "SC"
+  | "SD"
+  | "SE"
+  | "SG"
+  | "SH"
+  | "SI"
+  | "SJ"
+  | "SK"
+  | "SL"
+  | "SM"
+  | "SN"
+  | "SO"
+  | "SR"
+  | "SS"
+  | "ST"
+  | "SV"
+  | "SX"
+  | "SY"
+  | "SZ"
+  | "TC"
+  | "TD"
+  | "TF"
+  | "TG"
+  | "TH"
+  | "TJ"
+  | "TK"
+  | "TL"
+  | "TM"
+  | "TN"
+  | "TO"
+  | "TR"
+  | "TT"
+  | "TV"
+  | "TW"
+  | "TZ"
+  | "UA"
+  | "UG"
+  | "UM"
+  | "US"
+  | "UY"
+  | "UZ"
+  | "VA"
+  | "VC"
+  | "VE"
+  | "VG"
+  | "VI"
+  | "VN"
+  | "VU"
+  | "WF"
+  | "WS"
+  | "YE"
+  | "YT"
+  | "ZA"
+  | "ZM"
+  | "ZW";
+
+declare type JsonArray = JsonValue[] | readonly JsonValue[];
+
+/**
+ Matches a JSON object.
+ This type can be useful to enforce some input to be JSON-compatible or as a super-type to be extended from. Don't use this as a direct return type as the user would have to double-cast it: `jsonObject as unknown as CustomResponse`. Instead, you could extend your CustomResponse type from it to ensure your type only uses JSON-compatible types: `interface CustomResponse extends JsonObject { … }`.
+ */
+declare type JsonObject = {
+  [Key in string]: JsonValue;
+} & {
+  [Key in string]?: JsonValue | undefined;
+};
+
+declare type JsonPrimitive = string | number | boolean | null;
+
+/**
+ Matches any valid JSON value.
+ @see `Jsonify` if you need to transform a type to one that is assignable to `JsonValue`.
+ */
+declare type JsonValue = JsonPrimitive | JsonObject | JsonArray;
+
+/**
+ * Logger to be used in the runtime via context.log.
+ * You can set per-request properties that will be included in all log entries for this request.
+ * @beta
+ */
+declare interface Logger extends BaseLogger {
+  /**
+   * Set properties that will be included in all subsequent log entries for this request.
+   * Properties are merged with existing properties and any static fields configured in the logging plugin.
+   * Per-request properties take precedence over static fields with the same name.
+   *
+   * @param properties - Key-value pairs to include in log entries. Values must be string, number, or boolean.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   // Set properties that will be included in all logs for this request
+   *   context.log.setLogProperties({ http_status_code: 400, user_id: "123" });
+   *
+   *   context.log.error("Request failed"); // Will include http_status_code and user_id
+   *
+   *   return new Response("Error", { status: 400 });
+   * }
+   * ```
+   */
+  setLogProperties?(
+    properties: Record<string, string | number | boolean>
+  ): void;
+}
+
+/**
+ * Any request-type message (known or unknown method).
+ *
+ * @beta
+ */
+export declare type McpAnyRequestMessage =
+  | McpKnownRequestMessage
+  | McpUnknownRequestMessage;
+
+/**
+ * Params for `notifications/cancelled`.
+ *
+ * @beta
+ */
+export declare interface McpCancelledParams extends McpParams {
+  readonly requestId?: string | number;
+  readonly reason?: string;
+}
+
+/**
+ * A client→server JSON-RPC error — the client answering a server-initiated
+ * request with an error. Always forwarded untouched by `processMessages`.
+ *
+ * @beta
+ */
+export declare interface McpClientErrorMessage {
+  readonly type: "error";
+  readonly method?: never;
+  readonly id: McpRequestId | null;
+  readonly error: McpErrorDetail;
+  readonly params?: never;
+  readonly raw: unknown;
+}
+
+/**
+ * A client→server JSON-RPC result — the client answering a server-initiated
+ * request (for example a sampling or elicitation round-trip). These are
+ * always forwarded untouched by `processMessages`.
+ *
+ * @beta
+ */
+export declare interface McpClientResultMessage {
+  readonly type: "result";
+  readonly method?: never;
+  readonly id: McpRequestId;
+  readonly result: McpResult;
+  readonly params?: never;
+  readonly raw: unknown;
+}
+
+/**
+ * Params for `completion/complete`.
+ *
+ * @beta
+ */
+export declare interface McpCompleteParams extends McpParams {
+  readonly ref?: {
+    readonly type?: string;
+    readonly name?: string;
+    readonly uri?: string;
+    readonly [key: string]: unknown;
+  };
+  readonly argument?: {
+    readonly name?: string;
+    readonly value?: string;
+    readonly [key: string]: unknown;
+  };
+}
+
+/**
+ * A parsed view of an MCP HTTP request body.
+ *
+ * @beta
+ */
+export declare interface McpEnvelope {
+  /** Only JSON bodies are parsed today. */
+  readonly transport: "json";
+  /**
+   * Whether the wire body was a single message or a JSON-RPC batch array.
+   * The runtime preserves this shape when it rewrites the upstream request —
+   * a batch stays a batch, even with one surviving message.
+   */
+  readonly shape: "single" | "batch";
+  /** The messages in wire order. A single body has exactly one entry. */
+  readonly messages: readonly McpMessage[];
+  /**
+   * The MCP protocol version the client declared on the HTTP request
+   * (`MCP-Protocol-Version` header), when present. The runtime never infers
+   * a version from message shapes.
+   */
+  readonly protocolVersion?: string;
+}
+
+/**
+ * A JSON-RPC error object.
+ *
+ * @beta
+ */
+export declare interface McpErrorDetail {
+  readonly code: number;
+  readonly message: string;
+  readonly data?: unknown;
+}
+
+/**
+ * A message that reaches `processMessages` handlers. Invalid members never
+ * do — the runtime answers them automatically — and client-supplied JSON-RPC
+ * results/errors are always forwarded untouched.
+ *
+ * @beta
+ */
+export declare type McpHandlerMessage =
+  | McpKnownRequestMessage
+  | McpUnknownRequestMessage
+  | McpKnownNotificationMessage
+  | McpUnknownNotificationMessage;
+
+/**
+ * Params for `initialize`. All fields are optional because the gateway
+ * observes traffic rather than validating it against the full MCP schema.
+ *
+ * @beta
+ */
+export declare interface McpInitializeParams extends McpParams {
+  readonly protocolVersion?: string;
+  readonly capabilities?: Record<string, unknown>;
+  readonly clientInfo?: {
+    readonly name?: string;
+    readonly title?: string;
+    readonly version?: string;
+    readonly [key: string]: unknown;
+  };
+}
+
+/**
+ * A body member that is not a usable JSON-RPC message: not an object, missing
+ * `jsonrpc: "2.0"`, a request with a `null` (uncorrelatable) id, or a known
+ * method whose required params are malformed. `error` is the JSON-RPC error
+ * the runtime answers it with — `processMessages` does this automatically and
+ * never dispatches invalid members to handlers.
+ *
+ * @beta
+ */
+export declare interface McpInvalidMessage {
+  readonly type: "invalid";
+  readonly method?: string;
+  readonly id: McpRequestId | null;
+  readonly error: McpErrorDetail;
+  readonly params?: never;
+  readonly raw: unknown;
+}
+
+/**
+ * The union of all known notification messages.
+ *
+ * @beta
+ */
+export declare type McpKnownNotificationMessage = {
+  [M in McpNotificationMethod]: McpNotificationMessage<M>;
+}[McpNotificationMethod];
+
+/**
+ * The union of all known request messages, each with a literal `method`, so
+ * `if`/`switch` on `message.method` narrows `params` to the right shape.
+ *
+ * @beta
+ */
+export declare type McpKnownRequestMessage = {
+  [M in McpRequestMethod]: McpRequestMessage<M>;
+}[McpRequestMethod];
+
+/**
+ * Any message that can appear in a parsed MCP envelope. Narrow on `type`
+ * first; within `"request"`/`"notification"`, narrowing on `method` gives
+ * fully typed params for known methods.
+ *
+ * @beta
+ */
+export declare type McpMessage =
+  | McpKnownRequestMessage
+  | McpUnknownRequestMessage
+  | McpKnownNotificationMessage
+  | McpUnknownNotificationMessage
+  | McpClientResultMessage
+  | McpClientErrorMessage
+  | McpInvalidMessage;
+
+/**
+ * The arguments passed to every `processMessages` handler: the parsed
+ * message plus the ordinary Zuplo policy pipeline objects.
+ *
+ * @beta
+ */
+export declare interface McpMessageHandlerArgs<
+  TMessage extends McpHandlerMessage = McpHandlerMessage,
+  TOptions = unknown,
+> {
+  readonly message: TMessage;
+  readonly request: ZuploRequest;
+  readonly context: ZuploContext;
+  /** The full parsed envelope, for handlers that need batch siblings. */
+  readonly envelope: McpEnvelope;
+  readonly options: TOptions;
+  readonly policyName: string;
+}
+
+/**
+ * What a `processMessages` handler may return for a message:
+ *
+ * - `void` — the message continues unchanged.
+ * - `{ params }` — the message is forwarded with replaced params.
+ * - `{ error }` — the message is answered locally with a JSON-RPC error
+ *   (a blocked notification is dropped silently instead — notifications
+ *   have no replies).
+ * - `{ result }` — the message is answered locally with a result.
+ *
+ * Raw HTTP `Response` values are deliberately not verdicts: mixing
+ * HTTP-level and message-level outcomes inside a batch is ambiguous. To
+ * gate a whole exchange, use `getRequest` + `createErrorResponse` directly.
+ *
+ * @beta
+ */
+export declare type McpMessageVerdict =
+  | void
+  | undefined
+  | {
+      readonly params: Record<string, unknown>;
+    }
+  | {
+      readonly error: McpErrorDetail;
+    }
+  | {
+      readonly result: McpResult;
+    };
+
+/**
+ * A typed MCP notification (a client→server message with no reply).
+ *
+ * @beta
+ */
+export declare interface McpNotificationMessage<
+  TMethod extends McpNotificationMethod = McpNotificationMethod,
+> {
+  readonly type: "notification";
+  readonly method: TMethod;
+  readonly id?: never;
+  readonly params: McpNotificationParamsMap[TMethod];
+  readonly raw: unknown;
+}
+
+/**
+ * A known client→server notification method.
+ *
+ * @beta
+ */
+export declare type McpNotificationMethod = keyof McpNotificationParamsMap;
+
+/**
+ * The client→server notification methods this module types explicitly.
+ *
+ * @beta
+ */
+export declare interface McpNotificationParamsMap {
+  readonly "notifications/initialized": McpParams;
+  readonly "notifications/cancelled": McpCancelledParams;
+  readonly "notifications/progress": McpProgressParams;
+  readonly "notifications/roots/list_changed": McpParams;
+}
+
+/**
+ * Params for paginated list requests (`tools/list`, `prompts/list`, ...).
+ *
+ * @beta
+ */
+export declare interface McpPaginatedParams extends McpParams {
+  readonly cursor?: string;
+}
+
+/**
+ * Base shape for MCP request and notification params. Fields the MCP schema
+ * defines are typed explicitly on each method's params interface; everything
+ * else stays reachable through the index signature (and `message.raw`).
+ *
+ * @beta
+ */
+export declare interface McpParams {
+  readonly _meta?: Record<string, unknown>;
+  readonly [key: string]: unknown;
+}
+
+/**
+ * Configuration for {@link processMessages}. `requests` handles the
+ * client→server phase; response-phase handlers are a later addition.
+ *
+ * @beta
+ */
+export declare interface McpProcessMessagesConfig<TOptions = unknown> {
+  readonly requests?: McpRequestHandlers<TOptions>;
+}
+
+/**
+ * Params for `notifications/progress`.
+ *
+ * @beta
+ */
+export declare interface McpProgressParams extends McpParams {
+  readonly progressToken?: string | number;
+  readonly progress?: number;
+  readonly total?: number;
+  readonly message?: string;
+}
+
+/**
+ * Params for `prompts/get`. `name` is guaranteed by the parser.
+ *
+ * @beta
+ */
+export declare interface McpPromptGetParams extends McpParams {
+  readonly name: string;
+  readonly arguments?: Record<string, unknown>;
+}
+
+/**
+ * The per-method handler map for `processMessages`. Keys are MCP method
+ * names; `"*"` matches any message without a more specific handler. Each
+ * message runs at most one handler.
+ *
+ * @beta
+ */
+export declare type McpRequestHandlers<TOptions = unknown> = {
+  readonly [M in McpRequestMethod]?: (
+    args: McpMessageHandlerArgs<
+      Extract<
+        McpKnownRequestMessage,
+        {
+          method: M;
+        }
+      >,
+      TOptions
+    >
+  ) => HandlerResult;
+} & {
+  readonly [M in McpNotificationMethod]?: (
+    args: McpMessageHandlerArgs<
+      Extract<
+        McpKnownNotificationMessage,
+        {
+          method: M;
+        }
+      >,
+      TOptions
+    >
+  ) => HandlerResult;
+} & {
+  readonly "*"?: (
+    args: McpMessageHandlerArgs<McpHandlerMessage, TOptions>
+  ) => HandlerResult;
+};
+
+/**
+ * Zuplo-owned wire model for MCP (Model Context Protocol) JSON-RPC messages.
+ *
+ * These types are structurally compatible with the official MCP schema, but
+ * Zuplo owns the public surface so policy-author code does not track a third
+ * party's release cadence. Every message keeps the untyped wire value on
+ * `raw` as the escape hatch.
+ */
+/**
+ * A correlatable JSON-RPC request id. JSON-RPC also permits `null`, but a
+ * null id cannot be correlated to a reply, so the parser classifies null-id
+ * requests as {@link McpInvalidMessage} members instead.
+ *
+ * @beta
+ */
+export declare type McpRequestId = string | number;
+
+/**
+ * A typed MCP request (a client→server message that expects a reply). For
+ * known methods the parser normalizes absent params to `{}`, so `params` is
+ * always an object.
+ *
+ * @beta
+ */
+export declare interface McpRequestMessage<
+  TMethod extends McpRequestMethod = McpRequestMethod,
+> {
+  readonly type: "request";
+  readonly method: TMethod;
+  readonly id: McpRequestId;
+  readonly params: McpRequestParamsMap[TMethod];
+  /** The untyped wire value of this message. */
+  readonly raw: unknown;
+}
+
+/**
+ * A known client→server request method.
+ *
+ * @beta
+ */
+export declare type McpRequestMethod = keyof McpRequestParamsMap;
+
+/**
+ * The client→server request methods this module types explicitly, mapped to
+ * their params shapes. Unknown or future methods still surface as requests
+ * (with `method: string`); they are never dropped.
+ *
+ * @beta
+ */
+export declare interface McpRequestParamsMap {
+  readonly initialize: McpInitializeParams;
+  readonly ping: McpParams;
+  readonly "tools/list": McpPaginatedParams;
+  readonly "tools/call": McpToolCallParams;
+  readonly "prompts/list": McpPaginatedParams;
+  readonly "prompts/get": McpPromptGetParams;
+  readonly "resources/list": McpPaginatedParams;
+  readonly "resources/templates/list": McpPaginatedParams;
+  readonly "resources/read": McpResourceParams;
+  readonly "resources/subscribe": McpResourceParams;
+  readonly "resources/unsubscribe": McpResourceParams;
+  readonly "completion/complete": McpCompleteParams;
+  readonly "logging/setLevel": McpSetLevelParams;
+}
+
+/**
+ * Params for resource requests that address a resource by URI. `uri` is
+ * guaranteed by the parser.
+ *
+ * @beta
+ */
+export declare interface McpResourceParams extends McpParams {
+  readonly uri: string;
+}
+
+/**
+ * A JSON-RPC result object. MCP results are always JSON objects.
+ *
+ * @beta
+ */
+export declare type McpResult = Record<string, unknown>;
+
+/**
+ * Params for `logging/setLevel`. `level` is guaranteed by the parser.
+ *
+ * @beta
+ */
+export declare interface McpSetLevelParams extends McpParams {
+  readonly level: string;
+}
+
+/**
+ * Params for `tools/call`. `name` is guaranteed: a `tools/call` request
+ * without a string `name` is classified as an invalid member instead of a
+ * typed request.
+ *
+ * @beta
+ */
+export declare interface McpToolCallParams extends McpParams {
+  readonly name: string;
+  readonly arguments?: Record<string, unknown>;
+}
+
+/**
+ * A notification whose method this module does not type. Read the wire value
+ * through `raw`.
+ *
+ * @beta
+ */
+export declare interface McpUnknownNotificationMessage {
+  readonly type: "notification";
+  readonly method: string;
+  readonly id?: never;
+  readonly params: never;
+  readonly raw: unknown;
+}
+
+/**
+ * A request whose method this module does not type. The parser guarantees an
+ * unknown request never carries a method listed in {@link McpRequestParamsMap}
+ * (a known method with malformed params becomes an invalid member instead) —
+ * that guarantee is what makes narrowing on `message.method` sound. `params`
+ * is deliberately not part of the typed surface; read the wire value through
+ * `raw`.
+ *
+ * @beta
+ */
+export declare interface McpUnknownRequestMessage {
+  readonly type: "request";
+  readonly method: string;
+  readonly id: McpRequestId;
+  readonly params: never;
+  readonly raw: unknown;
+}
+
+declare type Modify<T, R> = Omit<T, keyof R> & R;
+
+/**
+ * @public
+ */
+declare interface OnResponseSendingFinalHook {
+  (
+    response: Response,
+    request: ZuploRequest,
+    context: ZuploContext
+  ): Promise<void> | void;
+}
+
+/**
+ * @public
+ */
+declare interface OnResponseSendingHook {
+  (
+    response: Response,
+    request: ZuploRequest,
+    context: ZuploContext
+  ): Promise<Response> | Response;
+}
+
+declare namespace OpenAPIV3 {
+  interface Document<T extends {} = {}> {
+    openapi: string;
+    info: InfoObject;
+    servers?: ServerObject[];
+    paths: PathsObject<T>;
+    components?: ComponentsObject;
+    security?: SecurityRequirementObject[];
+    tags?: TagObject[];
+    externalDocs?: ExternalDocumentationObject;
+    "x-express-openapi-additional-middleware"?: (
+      | ((request: any, response: any, next: any) => Promise<void>)
+      | ((request: any, response: any, next: any) => void)
+    )[];
+    "x-express-openapi-validation-strict"?: boolean;
+  }
+  interface InfoObject {
+    title: string;
+    description?: string;
+    termsOfService?: string;
+    contact?: ContactObject;
+    license?: LicenseObject;
+    version: string;
+  }
+  interface ContactObject {
+    name?: string;
+    url?: string;
+    email?: string;
+  }
+  interface LicenseObject {
+    name: string;
+    url?: string;
+  }
+  interface ServerObject {
+    url: string;
+    description?: string;
+    variables?: {
+      [variable: string]: ServerVariableObject;
+    };
+  }
+  interface ServerVariableObject {
+    enum?: string[];
+    default: string;
+    description?: string;
+  }
+  interface PathsObject<T extends {} = {}, P extends {} = {}> {
+    [pattern: string]: (PathItemObject<T> & P) | undefined;
+  }
+  enum HttpMethods {
+    GET = "get",
+    PUT = "put",
+    POST = "post",
+    DELETE = "delete",
+    OPTIONS = "options",
+    HEAD = "head",
+    PATCH = "patch",
+    TRACE = "trace",
+  }
+  type PathItemObject<T extends {} = {}> = {
+    $ref?: string;
+    summary?: string;
+    description?: string;
+    servers?: ServerObject[];
+    parameters?: (ReferenceObject | ParameterObject)[];
+  } & {
+    [method in HttpMethods]?: OperationObject<T>;
+  };
+  type OperationObject<T extends {} = {}> = {
+    tags?: string[];
+    summary?: string;
+    description?: string;
+    externalDocs?: ExternalDocumentationObject;
+    operationId?: string;
+    parameters?: (ReferenceObject | ParameterObject)[];
+    requestBody?: ReferenceObject | RequestBodyObject;
+    responses: ResponsesObject;
+    callbacks?: {
+      [callback: string]: ReferenceObject | CallbackObject;
+    };
+    deprecated?: boolean;
+    security?: SecurityRequirementObject[];
+    servers?: ServerObject[];
+  } & T;
+  interface ExternalDocumentationObject {
+    description?: string;
+    url: string;
+  }
+  interface ParameterObject extends ParameterBaseObject {
+    name: string;
+    in: string;
+  }
+  interface HeaderObject extends ParameterBaseObject {}
+  interface ParameterBaseObject {
+    description?: string;
+    required?: boolean;
+    deprecated?: boolean;
+    allowEmptyValue?: boolean;
+    style?: string;
+    explode?: boolean;
+    allowReserved?: boolean;
+    schema?: ReferenceObject | SchemaObject;
+    example?: any;
+    examples?: {
+      [media: string]: ReferenceObject | ExampleObject;
+    };
+    content?: {
+      [media: string]: MediaTypeObject;
+    };
+  }
+  type NonArraySchemaObjectType =
+    | "boolean"
+    | "object"
+    | "number"
+    | "string"
+    | "integer";
+  type ArraySchemaObjectType = "array";
+  type SchemaObject = ArraySchemaObject | NonArraySchemaObject;
+  interface ArraySchemaObject extends BaseSchemaObject {
+    type: ArraySchemaObjectType;
+    items: ReferenceObject | SchemaObject;
+  }
+  interface NonArraySchemaObject extends BaseSchemaObject {
+    type?: NonArraySchemaObjectType;
+  }
+  interface BaseSchemaObject {
+    title?: string;
+    description?: string;
+    format?: string;
+    default?: any;
+    multipleOf?: number;
+    maximum?: number;
+    exclusiveMaximum?: boolean;
+    minimum?: number;
+    exclusiveMinimum?: boolean;
+    maxLength?: number;
+    minLength?: number;
+    pattern?: string;
+    additionalProperties?: boolean | ReferenceObject | SchemaObject;
+    maxItems?: number;
+    minItems?: number;
+    uniqueItems?: boolean;
+    maxProperties?: number;
+    minProperties?: number;
+    required?: string[];
+    enum?: any[];
+    properties?: {
+      [name: string]: ReferenceObject | SchemaObject;
+    };
+    allOf?: (ReferenceObject | SchemaObject)[];
+    oneOf?: (ReferenceObject | SchemaObject)[];
+    anyOf?: (ReferenceObject | SchemaObject)[];
+    not?: ReferenceObject | SchemaObject;
+    nullable?: boolean;
+    discriminator?: DiscriminatorObject;
+    readOnly?: boolean;
+    writeOnly?: boolean;
+    xml?: XMLObject;
+    externalDocs?: ExternalDocumentationObject;
+    example?: any;
+    deprecated?: boolean;
+  }
+  interface DiscriminatorObject {
+    propertyName: string;
+    mapping?: {
+      [value: string]: string;
+    };
+  }
+  interface XMLObject {
+    name?: string;
+    namespace?: string;
+    prefix?: string;
+    attribute?: boolean;
+    wrapped?: boolean;
+  }
+  interface ReferenceObject {
+    $ref: string;
+  }
+  interface ExampleObject {
+    summary?: string;
+    description?: string;
+    value?: any;
+    externalValue?: string;
+  }
+  interface MediaTypeObject {
+    schema?: ReferenceObject | SchemaObject;
+    example?: any;
+    examples?: {
+      [media: string]: ReferenceObject | ExampleObject;
+    };
+    encoding?: {
+      [media: string]: EncodingObject;
+    };
+  }
+  interface EncodingObject {
+    contentType?: string;
+    headers?: {
+      [header: string]: ReferenceObject | HeaderObject;
+    };
+    style?: string;
+    explode?: boolean;
+    allowReserved?: boolean;
+  }
+  interface RequestBodyObject {
+    description?: string;
+    content: {
+      [media: string]: MediaTypeObject;
+    };
+    required?: boolean;
+  }
+  interface ResponsesObject {
+    [code: string]: ReferenceObject | ResponseObject;
+  }
+  interface ResponseObject {
+    description: string;
+    headers?: {
+      [header: string]: ReferenceObject | HeaderObject;
+    };
+    content?: {
+      [media: string]: MediaTypeObject;
+    };
+    links?: {
+      [link: string]: ReferenceObject | LinkObject;
+    };
+  }
+  interface LinkObject {
+    operationRef?: string;
+    operationId?: string;
+    parameters?: {
+      [parameter: string]: any;
+    };
+    requestBody?: any;
+    description?: string;
+    server?: ServerObject;
+  }
+  interface CallbackObject {
+    [url: string]: PathItemObject;
+  }
+  interface SecurityRequirementObject {
+    [name: string]: string[];
+  }
+  interface ComponentsObject {
+    schemas?: {
+      [key: string]: ReferenceObject | SchemaObject;
+    };
+    responses?: {
+      [key: string]: ReferenceObject | ResponseObject;
+    };
+    parameters?: {
+      [key: string]: ReferenceObject | ParameterObject;
+    };
+    examples?: {
+      [key: string]: ReferenceObject | ExampleObject;
+    };
+    requestBodies?: {
+      [key: string]: ReferenceObject | RequestBodyObject;
+    };
+    headers?: {
+      [key: string]: ReferenceObject | HeaderObject;
+    };
+    securitySchemes?: {
+      [key: string]: ReferenceObject | SecuritySchemeObject;
+    };
+    links?: {
+      [key: string]: ReferenceObject | LinkObject;
+    };
+    callbacks?: {
+      [key: string]: ReferenceObject | CallbackObject;
+    };
+  }
+  type SecuritySchemeObject =
+    | HttpSecurityScheme
+    | ApiKeySecurityScheme
+    | OAuth2SecurityScheme
+    | OpenIdSecurityScheme;
+  interface HttpSecurityScheme {
+    type: "http";
+    description?: string;
+    scheme: string;
+    bearerFormat?: string;
+  }
+  interface ApiKeySecurityScheme {
+    type: "apiKey";
+    description?: string;
+    name: string;
+    in: string;
+  }
+  interface OAuth2SecurityScheme {
+    type: "oauth2";
+    description?: string;
+    flows: {
+      implicit?: {
+        authorizationUrl: string;
+        refreshUrl?: string;
+        scopes: {
+          [scope: string]: string;
+        };
+      };
+      password?: {
+        tokenUrl: string;
+        refreshUrl?: string;
+        scopes: {
+          [scope: string]: string;
+        };
+      };
+      clientCredentials?: {
+        tokenUrl: string;
+        refreshUrl?: string;
+        scopes: {
+          [scope: string]: string;
+        };
+      };
+      authorizationCode?: {
+        authorizationUrl: string;
+        tokenUrl: string;
+        refreshUrl?: string;
+        scopes: {
+          [scope: string]: string;
+        };
+      };
+    };
+  }
+  interface OpenIdSecurityScheme {
+    type: "openIdConnect";
+    description?: string;
+    openIdConnectUrl: string;
+  }
+  interface TagObject {
+    name: string;
+    description?: string;
+    externalDocs?: ExternalDocumentationObject;
+  }
+}
+
+declare namespace OpenAPIV3_1 {
+  type Modify<T, R> = Omit<T, keyof R> & R;
+  type PathsWebhooksComponents<T extends {} = {}> = {
+    paths: PathsObject<T>;
+    webhooks: Record<string, PathItemObject | ReferenceObject>;
+    components: ComponentsObject;
+  };
+  type Document<T extends {} = {}> = Modify<
+    Omit<OpenAPIV3.Document<T>, "paths" | "components">,
+    {
+      info: InfoObject;
+      jsonSchemaDialect?: string;
+      servers?: ServerObject[];
+    } & (
+      | (Pick<PathsWebhooksComponents<T>, "paths"> &
+          Omit<Partial<PathsWebhooksComponents<T>>, "paths">)
+      | (Pick<PathsWebhooksComponents<T>, "webhooks"> &
+          Omit<Partial<PathsWebhooksComponents<T>>, "webhooks">)
+      | (Pick<PathsWebhooksComponents<T>, "components"> &
+          Omit<Partial<PathsWebhooksComponents<T>>, "components">)
+    )
+  >;
+  type InfoObject = Modify<
+    OpenAPIV3.InfoObject,
+    {
+      summary?: string;
+      license?: LicenseObject;
+    }
+  >;
+  type ContactObject = OpenAPIV3.ContactObject;
+  type LicenseObject = Modify<
+    OpenAPIV3.LicenseObject,
+    {
+      identifier?: string;
+    }
+  >;
+  type ServerObject = Modify<
+    OpenAPIV3.ServerObject,
+    {
+      url: string;
+      description?: string;
+      variables?: Record<string, ServerVariableObject>;
+    }
+  >;
+  type ServerVariableObject = Modify<
+    OpenAPIV3.ServerVariableObject,
+    {
+      enum?: [string, ...string[]];
+    }
+  >;
+  type PathsObject<T extends {} = {}, P extends {} = {}> = Record<
+    string,
+    (PathItemObject<T> & P) | undefined
+  >;
+  type HttpMethods = OpenAPIV3.HttpMethods;
+  type PathItemObject<T extends {} = {}> = Modify<
+    OpenAPIV3.PathItemObject<T>,
+    {
+      servers?: ServerObject[];
+      parameters?: (ReferenceObject | ParameterObject)[];
+    }
+  > & {
+    [method in HttpMethods]?: OperationObject<T>;
+  };
+  type OperationObject<T extends {} = {}> = Modify<
+    OpenAPIV3.OperationObject<T>,
+    {
+      parameters?: (ReferenceObject | ParameterObject)[];
+      requestBody?: ReferenceObject | RequestBodyObject;
+      responses?: ResponsesObject;
+      callbacks?: Record<string, ReferenceObject | CallbackObject>;
+      servers?: ServerObject[];
+    }
+  > &
+    T;
+  type ExternalDocumentationObject = OpenAPIV3.ExternalDocumentationObject;
+  type ParameterObject = OpenAPIV3.ParameterObject;
+  type HeaderObject = OpenAPIV3.HeaderObject;
+  type ParameterBaseObject = OpenAPIV3.ParameterBaseObject;
+  type NonArraySchemaObjectType = OpenAPIV3.NonArraySchemaObjectType | "null";
+  type ArraySchemaObjectType = OpenAPIV3.ArraySchemaObjectType;
+  /**
+   * There is no way to tell typescript to require items when type is either 'array' or array containing 'array' type
+   * 'items' will be always visible as optional
+   * Casting schema object to ArraySchemaObject or NonArraySchemaObject will work fine
+   */
+  type SchemaObject =
+    | ArraySchemaObject
+    | NonArraySchemaObject
+    | MixedSchemaObject;
+  interface ArraySchemaObject extends BaseSchemaObject {
+    type: ArraySchemaObjectType;
+    items: ReferenceObject | SchemaObject;
+  }
+  interface NonArraySchemaObject extends BaseSchemaObject {
+    type?: NonArraySchemaObjectType;
+  }
+  interface MixedSchemaObject extends BaseSchemaObject {
+    type?: (ArraySchemaObjectType | NonArraySchemaObjectType)[];
+    items?: ReferenceObject | SchemaObject;
+  }
+  type BaseSchemaObject = Modify<
+    Omit<OpenAPIV3.BaseSchemaObject, "nullable">,
+    {
+      examples?: OpenAPIV3.BaseSchemaObject["example"][];
+      exclusiveMinimum?: boolean | number;
+      exclusiveMaximum?: boolean | number;
+      contentMediaType?: string;
+      $schema?: string;
+      additionalProperties?: boolean | ReferenceObject | SchemaObject;
+      properties?: {
+        [name: string]: ReferenceObject | SchemaObject;
+      };
+      allOf?: (ReferenceObject | SchemaObject)[];
+      oneOf?: (ReferenceObject | SchemaObject)[];
+      anyOf?: (ReferenceObject | SchemaObject)[];
+      not?: ReferenceObject | SchemaObject;
+      discriminator?: DiscriminatorObject;
+      externalDocs?: ExternalDocumentationObject;
+      xml?: XMLObject;
+      const?: any;
+    }
+  >;
+  type DiscriminatorObject = OpenAPIV3.DiscriminatorObject;
+  type XMLObject = OpenAPIV3.XMLObject;
+  type ReferenceObject = Modify<
+    OpenAPIV3.ReferenceObject,
+    {
+      summary?: string;
+      description?: string;
+    }
+  >;
+  type ExampleObject = OpenAPIV3.ExampleObject;
+  type MediaTypeObject = Modify<
+    OpenAPIV3.MediaTypeObject,
+    {
+      schema?: SchemaObject | ReferenceObject;
+      examples?: Record<string, ReferenceObject | ExampleObject>;
+    }
+  >;
+  type EncodingObject = OpenAPIV3.EncodingObject;
+  type RequestBodyObject = Modify<
+    OpenAPIV3.RequestBodyObject,
+    {
+      content: {
+        [media: string]: MediaTypeObject;
+      };
+    }
+  >;
+  type ResponsesObject = Record<string, ReferenceObject | ResponseObject>;
+  type ResponseObject = Modify<
+    OpenAPIV3.ResponseObject,
+    {
+      headers?: {
+        [header: string]: ReferenceObject | HeaderObject;
+      };
+      content?: {
+        [media: string]: MediaTypeObject;
+      };
+      links?: {
+        [link: string]: ReferenceObject | LinkObject;
+      };
+    }
+  >;
+  type LinkObject = Modify<
+    OpenAPIV3.LinkObject,
+    {
+      server?: ServerObject;
+    }
+  >;
+  type CallbackObject = Record<string, PathItemObject | ReferenceObject>;
+  type SecurityRequirementObject = OpenAPIV3.SecurityRequirementObject;
+  type ComponentsObject = Modify<
+    OpenAPIV3.ComponentsObject,
+    {
+      schemas?: Record<string, SchemaObject>;
+      responses?: Record<string, ReferenceObject | ResponseObject>;
+      parameters?: Record<string, ReferenceObject | ParameterObject>;
+      examples?: Record<string, ReferenceObject | ExampleObject>;
+      requestBodies?: Record<string, ReferenceObject | RequestBodyObject>;
+      headers?: Record<string, ReferenceObject | HeaderObject>;
+      securitySchemes?: Record<string, ReferenceObject | SecuritySchemeObject>;
+      links?: Record<string, ReferenceObject | LinkObject>;
+      callbacks?: Record<string, ReferenceObject | CallbackObject>;
+      pathItems?: Record<string, ReferenceObject | PathItemObject>;
+    }
+  >;
+  type SecuritySchemeObject = OpenAPIV3.SecuritySchemeObject;
+  type HttpSecurityScheme = OpenAPIV3.HttpSecurityScheme;
+  type ApiKeySecurityScheme = OpenAPIV3.ApiKeySecurityScheme;
+  type OAuth2SecurityScheme = OpenAPIV3.OAuth2SecurityScheme;
+  type OpenIdSecurityScheme = OpenAPIV3.OpenIdSecurityScheme;
+  type TagObject = OpenAPIV3.TagObject;
+  {
+  }
+}
+
+/**
+ * Base object for parameter definitions
+ * @public
+ */
+declare type ParameterBaseObject = Modify<
+  Omit<
+    OpenAPIV3_1.ParameterBaseObject,
+    | "content"
+    | "allowEmptyValue"
+    | "style"
+    | "allowReserved"
+    | "explode"
+    | "example"
+    | "examples"
+  >,
+  {
+    schema: OpenAPIV3_1.SchemaObject;
+  }
+>;
+
+/**
+ * Definition of a parameter
+ * @public
+ */
+declare interface ParameterDefinition extends ParameterBaseObject {
+  name: string;
+  in: string;
+}
+
+/**
+ * Build an inbound policy handler that runs per-message MCP logic while the
+ * runtime owns the batch mechanics.
+ *
+ * The runtime parses the envelope once, runs at most one handler per message
+ * (exact method key first, then `"*"`), forwards surviving messages —
+ * preserving the wire shape, so a batch stays a batch — correlates upstream
+ * replies by JSON-RPC id, inserts locally generated errors and results, and
+ * rebuilds the response in the original request order.
+ *
+ * Contracts:
+ *
+ * - Invalid members (no `jsonrpc: "2.0"`, null/malformed ids, known methods
+ *   with malformed required params) are answered automatically and never
+ *   reach handlers.
+ * - A batch containing duplicate request ids is rejected before forwarding —
+ *   stitching duplicates would be guesswork.
+ * - A thrown handler fails only its own message (`-32603`); siblings
+ *   continue. The thrown error is logged, never sent to the client.
+ * - Blocked notifications are dropped silently (notifications have no
+ *   replies).
+ * - Client-supplied JSON-RPC results/errors are forwarded untouched.
+ * - If every message resolves locally the upstream is never called.
+ * - Non-MCP bodies pass through untouched.
+ *
+ * @beta
+ */
+export declare function processMessages<TOptions = unknown>(
+  config: McpProcessMessagesConfig<TOptions>
+): InboundPolicyHandler<TOptions>;
+
+/**
+ * Generic type parameters for a request.
+ * Extends RequestInitGeneric and adds query parameter typing.
+ * @public
+ */
+declare interface RequestGeneric extends RequestInitGeneric {
+  Query?: RequestQueryDefault;
+}
+
+/**
+ * Generic type parameters for request initialization.
+ * Used to strongly type the user data and path parameters.
+ * @public
+ */
+declare interface RequestInitGeneric {
+  UserData?: UserDataDefault;
+  Params?: RequestParamsDefault;
+}
+
+declare type RequestParamsDefault = Record<string, string>;
+
+declare type RequestQueryDefault = Record<string, string>;
+
+/**
+ * Represents an authenticated user on the request.
+ * Set by authentication policies like API key, JWT, or OAuth.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * // Access user info in a handler
+ * export function myHandler(request: ZuploRequest, context: ZuploContext) {
+ *   if (!request.user) {
+ *     return new Response("Unauthorized", { status: 401 });
+ *   }
+ *
+ *   const userId = request.user.sub;
+ *   const customData = request.user.data as { role: string; tenantId: string };
+ *
+ *   context.log.info(`Request from user ${userId} with role ${customData.role}`);
+ * }
+ * ```
+ */
+declare interface RequestUser<TUserData> {
+  sub: string;
+  data: TUserData;
+}
+
+declare type ResolveRequestParams<
+  TParams extends RequestParamsDefault | undefined,
+> = TParams extends RequestParamsDefault ? TParams : RequestParamsDefault;
+
+declare type ResolveRequestQuery<
+  TQuery extends RequestQueryDefault | undefined,
+> = TQuery extends RequestQueryDefault ? TQuery : RequestQueryDefault;
+
+declare type ResolveUserData<TUserData extends UserDataDefault | undefined> =
+  TUserData extends UserDataDefault ? TUserData : UserDataDefault;
+
+/**
+ * Definition of responses for a route
+ * @public
+ */
+declare type ResponsesDefinition = Record<
+  HttpStatusCode | HttpStatusCodeRangeDefinition,
+  Modify<
+    Omit<OpenAPIV3_1.ResponseObject, "links">,
+    {
+      headers?: {
+        [header: string]: ParameterBaseObject;
+      };
+    }
+  >
+>;
+
+/**
+ * @public
+ */
+declare interface RouteConfiguration extends Omit<
+  BuildRouteConfiguration,
+  "raw"
+> {
+  /**
+   * @deprecated Please switch to "raw().operationId"
+   */
+  operationId?: string;
+  /**
+   * @deprecated Please switch to "raw().summary"
+   */
+  summary?: string;
+  /**
+   * @deprecated Please switch to "raw().tags"
+   */
+  tags?: string[];
+  /**
+   * @deprecated Please switch to "raw().parameters"
+   */
+  parameters?: ParameterDefinition[];
+  /**
+   * @deprecated Please switch to "raw().responses"
+   */
+  responses?: ResponsesDefinition;
+  /**
+   * Gets the raw route configuration object
+   */
+  raw<T = any>(): T;
+}
+
+declare type UserDataDefault = any;
+
+/**
+ * @public
+ */
+declare interface WaitUntilFunc {
+  (promise: Promise<any>): void;
+}
+
+declare interface ZuploAnalyticsContext {
+  addAnalyticsEvent(
+    value: number,
+    eventType: EventType,
+    metadata: JsonObject,
+    unit?: string,
+    eventId?: string
+  ): void;
+  flushAnalyticsEvents(): ZuploAnalyticsEvent[];
+  getAnalyticsEvents(): ZuploAnalyticsEvent[];
+}
+
+declare interface ZuploAnalyticsEvent<T extends JsonObject = JsonObject> {
+  eventId: string;
+  requestId: string;
+  timestamp: Date;
+  accountName: string;
+  projectName: string;
+  deploymentName: string;
+  eventType: EventType;
+  metadata: T;
+  unit?: string;
+  value: number;
+}
+
+/**
+ * The ZuploContext provides information about the current request and helper methods.
+ * @public
+ */
+declare interface ZuploContext extends EventTarget {
+  /**
+   * The unique identifier of this context
+   */
+  readonly contextId: Readonly<string>;
+  /**
+   * The unique identifier of the incoming request
+   */
+  readonly requestId: Readonly<string>;
+  /**
+   * Request based logger
+   */
+  readonly log: Readonly<Logger>;
+  /**
+   * The route that is being processed
+   */
+  readonly route: Readonly<RouteConfiguration>;
+  /**
+   * Custom data stored on the ZuploContext
+   */
+  readonly custom: Record<string, any>;
+  readonly incomingRequestProperties: IncomingRequestProperties;
+  /**
+   * The parent context that spawned this context
+   * @beta
+   */
+  readonly parentContext: ZuploContext | undefined;
+  /* Excluded from this release type: analyticsContext */
+  readonly invokeInboundPolicy: (
+    policyName: string,
+    request: ZuploRequest
+  ) => Promise<Response | ZuploRequest>;
+  readonly invokeOutboundPolicy: (
+    policyName: string,
+    response: Response,
+    request: ZuploRequest
+  ) => Promise<Response>;
+  /**
+   * Invokes a route based on a Request without going back out to HTTP.
+   * Can take a relative route path to invoke on the Gateway
+   * Example: "/my/route" will invoke http://localhost/my/route on the Gateway
+   * without having to rebuild the Request's protocol and host.
+   * @beta
+   */
+  readonly invokeRoute: <TOptions extends RequestGeneric = RequestGeneric>(
+    input: string | URL | Request,
+    init?: ZuploRequestInit<TOptions>
+  ) => Promise<Response>;
+  readonly waitUntil: WaitUntilFunc;
+  /**
+   * Fires just before the response is sent. Response can be modified.
+   */
+  readonly addResponseSendingHook: (hook: OnResponseSendingHook) => void;
+  /**
+   * Fires immediately after the response is sent. Response cannot be modified.
+   */
+  readonly addResponseSendingFinalHook: (
+    hook: OnResponseSendingFinalHook
+  ) => void;
+  /**
+   * Appends an event listener for events whose type attribute value is type. The callback argument sets the callback that will be invoked when the event is dispatched.
+   *
+   * The options argument sets listener-specific options. For compatibility this can be a boolean, in which case the method behaves exactly as if the value was specified as options's capture.
+   *
+   * When set to true, options's capture prevents callback from being invoked when the event's eventPhase attribute value is BUBBLING_PHASE. When false (or not present), callback will not be invoked when event's eventPhase attribute value is CAPTURING_PHASE. Either way, callback will be invoked if event's eventPhase attribute value is AT_TARGET.
+   *
+   * When set to true, options's passive indicates that the callback will not cancel the event by invoking preventDefault(). This is used to enable performance optimizations described in § 2.8 Observing event listeners.
+   *
+   * When set to true, options's once indicates that the callback will only be invoked once after which the event listener will be removed.
+   *
+   * If an AbortSignal is passed for options's signal, then the event listener will be removed when signal is aborted.
+   *
+   * The event listener is appended to target's event listener list and is not appended if it has the same type, callback, and capture.
+   * @deprecated This will be removed in the future. Use hooks instead. See {@link https://zuplo.com/docs/programmable-api/runtime-extensions}
+   */
+  addEventListener<Type extends keyof Record<string, Event>>(
+    type: Type,
+    handler: EventListenerOrEventListenerObject,
+    options?: AddEventListenerOptions | boolean
+  ): void;
+  /**
+   * @deprecated This will be removed in the future. See {@link https://zuplo.com/docs/programmable-api/runtime-extensions}
+   */
+  removeEventListener<Type extends keyof Record<string, Event>>(
+    type: Type,
+    handler: EventListenerOrEventListenerObject,
+    options?: AddEventListenerOptions | boolean
+  ): void;
+}
+
+/**
+ * Enhanced Request class that extends the standard Web Request API with
+ * convenient properties for accessing path parameters, query strings, and user data.
+ * This is the request type passed to all handlers and policies in Zuplo.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * import { ZuploRequest, ZuploContext } from "@zuplo/runtime";
+ *
+ * export function myHandler(request: ZuploRequest, context: ZuploContext) {
+ *   // Access query parameters
+ *   const page = request.query.page || "1";
+ *   const limit = request.query.limit || "10";
+ *
+ *   // Access path parameters (e.g., from /users/:userId)
+ *   const userId = request.params.userId;
+ *
+ *   // Access authenticated user
+ *   const user = request.user;
+ *
+ *   // Standard Request properties still available
+ *   const contentType = request.headers.get("content-type");
+ *   const method = request.method;
+ *
+ *   return Response.json({
+ *     userId,
+ *     page,
+ *     limit,
+ *     authenticated: !!user
+ *   });
+ * }
+ * ```
+ *
+ * @example
+ * ```typescript
+ * // Strongly typed request parameters
+ * interface MyParams {
+ *   userId: string;
+ *   orderId: string;
+ * }
+ *
+ * interface MyQuery {
+ *   include?: string;
+ *   format?: "json" | "xml";
+ * }
+ *
+ * interface MyUserData {
+ *   role: "admin" | "user";
+ *   tenantId: string;
+ * }
+ *
+ * type MyRequest = ZuploRequest<{
+ *   Params: MyParams;
+ *   Query: MyQuery;
+ *   UserData: MyUserData;
+ * }>;
+ *
+ * export function typedHandler(request: MyRequest, context: ZuploContext) {
+ *   // All properties are now strongly typed
+ *   const userId = request.params.userId; // string
+ *   const format = request.query.format; // "json" | "xml" | undefined
+ *   const role = request.user?.data.role; // "admin" | "user" | undefined
+ * }
+ * ```
+ */
+declare class ZuploRequest<
+  TOptions extends RequestGeneric = RequestGeneric,
+> extends Request {
+  #private;
+  constructor(
+    input: string | URL | Request,
+    init?: ZuploRequestInit<TOptions>,
+    originalRequest?: Request
+  );
+  /* Excluded from this release type: originalRequest */
+  /**
+   * A dictionary of query-string values
+   *
+   * @example
+   * The url `https://example.com?foo=bar` would return
+   * the following query object:
+   *
+   * ```
+   * const foo = request.query.foo;
+   * ```
+   *
+   * @readonly
+   */
+  get query(): Readonly<ResolveRequestQuery<TOptions["Query"]>>;
+  /**
+   * If you use tokens in your route’s URL, they are
+   * automatically parsed into properties on the params
+   * property of your request.
+   *
+   * @example
+   * The route `/products/:productId/vendors/:vendorId`
+   * would include two params:
+   *
+   * ```
+   * const productId = request.params.productId;
+   * const vendorId = request.params.vendorId;
+   * ```
+   * @readonly
+   */
+  get params(): Readonly<ResolveRequestParams<TOptions["Params"]>>;
+  /**
+   * An optional object identifying a ‘user’.
+   *
+   * @remarks
+   * If undefined this typically means the request is
+   * anonymous. If present, the user object will have
+   * a sub property that is a unique identifier for
+   * that user. There is also an optional data property
+   * that is of any type that typically contains other
+   * information about the user. When using JWT tokens
+   * you’ll usually find all the claims here.
+   *
+   * @readonly
+   */
+  user?: RequestUser<ResolveUserData<TOptions["UserData"]>>;
+}
+
+/**
+ * Options for creating a new ZuploRequest.
+ * Extends the standard RequestInit with Zuplo-specific properties.
+ * @public
+ */
+declare interface ZuploRequestInit<
+  TOptions extends RequestInitGeneric = RequestInitGeneric,
+> extends RequestInit {
+  params?: ResolveRequestParams<TOptions["Params"]>;
+  user?: ResolveUserData<TOptions["UserData"]>;
+}
+
+export {};