@zuplo/cli 6.73.12 → 6.73.14

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -142,6 +142,85 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
   authScheme?: string;
 }
 
+/**
+ * Authenticates requests to an AI Gateway v2 endpoint with application API
+ * keys.
+ *
+ * Place this policy first in the inbound chain so the policies that follow can
+ * use the authenticated app's configuration. Use `authHeader` and `authScheme`
+ * when clients send their app key somewhere other than the default
+ * `Authorization: Bearer` header.
+ *
+ * @title AI Gateway Authentication (v2)
+ * @product ai-gateway
+ * @hidden
+ * @requiresAI
+ * @public
+ *
+ * @param request - The incoming ZuploRequest
+ * @param context - The ZuploContext
+ * @param unparsedOptions - The policy configuration options
+ * @param policyName - The name of the policy instance
+ * @returns The authenticated request with user info, or a 401 response if unauthorized
+ *
+ * @example
+ * ```json
+ * // policies.json - Authenticate an AI Gateway v2 route
+ * {
+ *   "name": "ai-gateway-auth",
+ *   "policyType": "ai-gateway-auth-v2",
+ *   "handler": {
+ *     "export": "AIGatewayAuthV2InboundPolicy",
+ *     "module": "$import(@zuplo/runtime)",
+ *     "options": {
+ *        "cacheTtlSeconds": 300
+ *     }
+ *   }
+ * }
+ * ```
+ *
+ * @example
+ * ```json
+ * // Accept an app key from a custom header
+ * {
+ *   "handler": {
+ *     "export": "AIGatewayAuthV2InboundPolicy",
+ *     "module": "$import(@zuplo/runtime)",
+ *     "options": {
+ *       "authHeader": "x-api-key",
+ *       "authScheme": ""
+ *     }
+ *   }
+ * }
+ * ```
+ *
+ */
+export declare function AIGatewayAuthV2InboundPolicy(
+  request: ZuploRequest,
+  context: ZuploContext,
+  unparsedOptions: AIGatewayAuthV2InboundPolicyOptions,
+  policyName: string
+): Promise<Response | ZuploRequest<RequestGeneric_2>>;
+
+/**
+ * The options for this policy.
+ * @public
+ */
+export declare interface AIGatewayAuthV2InboundPolicyOptions {
+  /**
+   * The time to cache authentication results for a particular key. Higher values will decrease latency. Cached results will be valid until the cache expires even in the event the key is deleted, etc.
+   */
+  cacheTtlSeconds?: number;
+  /**
+   * The name of the header with the key.
+   */
+  authHeader?: string;
+  /**
+   * The scheme used on the header.
+   */
+  authScheme?: string;
+}
+
 /**
  * An AI Gateway capability that can have a resolved model selection.
  *
@@ -160,6 +239,41 @@ export declare type AIGatewayCapability =
   | "audio_speech"
   | "audio_transcriptions";
 
+/**
+ * Runs the inbound policy chain selected for an authenticated AI Gateway app.
+ *
+ * Use this policy after AI Gateway Authentication (v2) when apps need
+ * different combinations or ordering of AI Gateway policies. Applications
+ * select from policies pre-declared by the gateway. Applications without a
+ * `inboundPolicyChain`, or with an empty chain, run no application-selected
+ * policies.
+ * Entry options replace the declaration's options as a complete object; omit
+ * them to inherit the declaration, including environment-backed credentials.
+ *
+ * @title AI Gateway Configuration Executor (v2)
+ * @product ai-gateway
+ * @hidden
+ * @requiresAI
+ */
+export declare class AIGatewayConfigurationExecutorV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationExecutorV2InboundPolicyOptions> {
+  #private;
+  static readonly policyType = "ai-gateway-configuration-executor-v2";
+  constructor(
+    options: AIGatewayConfigurationExecutorV2InboundPolicyOptions,
+    policyName: string
+  );
+  handler(
+    request: ZuploRequest,
+    context: ZuploContext
+  ): Promise<ZuploRequest | Response>;
+}
+
+/**
+ * The application policy chain is supplied through the authenticated request configuration.
+ * @public
+ */
+export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {}
+
 /**
  * Handler that routes AI/LLM requests through Zuplo's LLM Translation Layer.
  * This handler forwards requests to the translation layer that handles provider-specific
@@ -612,8 +726,9 @@ export declare interface AIGatewaySemanticCacheOutboundPolicyOptions {}
  * Caching parameters (semanticTolerance, expirationSecondsTtl, namespace) come
  * from the policy options — the policy reads nothing from
  * `request.user.configuration` to decide whether to cache, and presence in the
- * route's chain is what enables it. `namespace` defaults to the AI Gateway
- * configuration id when omitted so caching stays scoped per tenant.
+ * route's chain is what enables it. An authenticated AI Gateway configuration
+ * id always provides the cache namespace so application-supplied options cannot
+ * cross tenant partitions.
  *
  * Cache outcomes are reported on the response via the RFC 9211 `Cache-Status`
  * header under the cache name `zp-aigw-sem-cache` (hit:
@@ -2683,7 +2798,7 @@ declare interface BuildRouteConfiguration {
 }
 
 /**
- * Partitions the cache. Omit to default to the AI Gateway configuration id, which keeps caching scoped per tenant.
+ * Partitions the cache when no authenticated AI Gateway configuration id is available. Authenticated AI Gateway applications always use their configuration id so cache entries remain isolated per tenant.
  * @public
  */
 declare type CacheNamespace = string;

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.73.12",
+  "version": "6.73.14",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "6.73.12",
+  "version": "6.73.14",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -27,10 +27,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.201.1",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "6.73.12",
+    "@zuplo/core": "6.73.14",
     "@zuplo/editor": "1.0.29844086763",
-    "@zuplo/openapi-tools": "6.73.12",
-    "@zuplo/runtime": "6.73.12",
+    "@zuplo/openapi-tools": "6.73.14",
+    "@zuplo/runtime": "6.73.14",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -61,8 +61,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "3.25.76",
-    "@zuplo/graphql": "6.73.12",
-    "@zuplo/otel": "6.73.12"
+    "@zuplo/graphql": "6.73.14",
+    "@zuplo/otel": "6.73.14"
   },
   "bundleDependencies": [
     "@inquirer/prompts",