@zuplo/cli 6.73.26 → 6.73.27

package/node_modules/@zuplo/runtime/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{b as l}from"../chunk-7WS4HIGR.js";import{Z as n}from"../chunk-VCMIY3WJ.js";import{a as o}from"../chunk-2WLR6ZDZ.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function t(i){e.push(Promise.resolve(i))}return o(t,"waitUntil"),{context:new s({event:{waitUntil:t},route:u.route}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(g,"createMockContext");var p={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},s=class extends EventTarget{static{o(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=p,parentContext:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=r,this.#e=e,this.analyticsContext=new l(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,r){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,t,r){let d=o(i=>{try{typeof t=="function"?t(i):t.handleEvent(i)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,d,r)}};export{s as MockZuploContext,g as createMockContext};
+import{b as l}from"../chunk-SH74D236.js";import{Z as n}from"../chunk-YIT72S45.js";import{a as o}from"../chunk-TYV53J3B.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function t(i){e.push(Promise.resolve(i))}return o(t,"waitUntil"),{context:new s({event:{waitUntil:t},route:u.route}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(g,"createMockContext");var p={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},s=class extends EventTarget{static{o(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=p,parentContext:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=r,this.#e=e,this.analyticsContext=new l(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,r){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,t,r){let d=o(i=>{try{typeof t=="function"?t(i):t.handleEvent(i)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,d,r)}};export{s as MockZuploContext,g as createMockContext};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/esm/sdks/aws/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{h as a,i as l,j as c,k as o,n as p,o as y,p as m}from"../../chunk-V4X24KCQ.js";import"../../chunk-TRBIM47E.js";import"../../chunk-VCMIY3WJ.js";import{a as i}from"../../chunk-2WLR6ZDZ.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
+import{h as a,i as l,j as c,k as o,n as p,o as y,p as m}from"../../chunk-QVZD2XRK.js";import"../../chunk-UKQQD2JN.js";import"../../chunk-YIT72S45.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -1,6 +1,6 @@
 import { Attributes } from "@opentelemetry/api";
-import { CallToolRequest } from "@zuplo/mcp/types";
-import { CallToolResult } from "@zuplo/mcp/types";
+import type { CallToolRequest } from "@modelcontextprotocol/sdk/types.js";
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
 import { InboundPolicyHandler as InboundPolicyHandler_2 } from "../../policies.js";
 import { KeyLike } from "jose";
 import { RequestGeneric as RequestGeneric_2 } from "../../request.js";
@@ -10543,6 +10543,12 @@ declare interface NotFoundOptions {
   routesMatchedByPathOnly: RouteConfiguration[];
 }
 
+/**
+ * Where the client credentials are sent on the token request. `body` sends `client_id` and `client_secret` as form parameters. `header` sends them with HTTP Basic authentication as described in RFC 6749 section 2.3.1.
+ * @public
+ */
+declare type OAuthClientCredentialsLocation = "body" | "header";
+
 /* Excluded from this release type: OAuthProtectedResourceBasePlugin */
 
 /* Excluded from this release type: OAuthProtectedResourceMetadataOptions */
@@ -15210,6 +15216,83 @@ export declare interface UpstreamGcpServiceAuthInboundPolicyOptions {
   enableSuspiciousHeaderWarning?: boolean;
 }
 
+/**
+ * Fetches an access token from any OAuth 2.0 token endpoint using the client
+ * credentials grant and adds it to a header (`Authorization` by default) on
+ * the upstream request. Tokens are cached until shortly before they expire.
+ *
+ * @title Upstream OAuth 2.0 Client Credentials Auth
+ * @product api-gateway
+ * @public
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
+ */
+export declare class UpstreamOAuthClientCredentialsInboundPolicy extends InboundPolicy<UpstreamOAuthClientCredentialsInboundPolicyOptions> {
+  #private;
+  static readonly policyType = "upstream-oauth-client-credentials";
+  constructor(
+    options: UpstreamOAuthClientCredentialsInboundPolicyOptions,
+    policyName: string
+  );
+  handler(
+    request: ZuploRequest,
+    context: ZuploContext
+  ): Promise<ZuploRequest | Response>;
+}
+
+/**
+ * The options for this policy.
+ * @public
+ */
+export declare interface UpstreamOAuthClientCredentialsInboundPolicyOptions {
+  /**
+   * The URL of the OAuth 2.0 token endpoint that issues the access token.
+   */
+  tokenUrl: string;
+  /**
+   * The client ID used to authenticate with the token endpoint.
+   */
+  clientId: string;
+  /**
+   * The client secret used to authenticate with the token endpoint.
+   */
+  clientSecret: string;
+  /**
+   * Space-delimited list of scopes to request. When not set, the `scope` parameter is omitted from the token request.
+   */
+  scope?: string;
+  /**
+   * The value of the `audience` form parameter sent to the token endpoint. Required by some identity providers such as Auth0. When not set, the parameter is omitted from the token request.
+   */
+  audience?: string;
+  credentialsIn?: OAuthClientCredentialsLocation;
+  /**
+   * Additional form parameters to include in the token request, for example `resource` for identity providers that require it.
+   */
+  additionalParameters?: {
+    [k: string]: string;
+  };
+  /**
+   * The name of the header on the upstream request that the access token is set on.
+   */
+  headerName?: string;
+  /**
+   * The scheme that prefixes the access token in the header. When the token response includes a `token_type`, that value is used instead.
+   */
+  headerScheme?: string;
+  /**
+   * The number of times to retry fetching the token in the event of a failure.
+   */
+  tokenRetries?: number;
+  /**
+   * The number of seconds less than the token expiration to cache the token.
+   */
+  expirationOffsetSeconds?: number;
+}
+
 /**
  * Generates a Zuplo JWT token and attaches it to the outgoing request. This
  * policy creates a self-signed JWT using the Zuplo JWT plugin and adds it
@@ -16084,7 +16167,7 @@ export declare class ZuploMcpSdk {
    * Retrieves the MCP request object from the context.
    * Use this to access metadata like `_meta` from the incoming tool call.
    *
-   * @returns The "@zuplo/mcp" MCP call tool request object or null if not found
+   * @returns The MCP call tool request object or null if not found
    */
   getRawCallToolRequest(): CallToolRequest | null;
   /**

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.73.26",
+  "version": "6.73.27",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "6.73.26",
+  "version": "6.73.27",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -27,10 +27,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "6.73.26",
+    "@zuplo/core": "6.73.27",
     "@zuplo/editor": "1.0.29844086763",
-    "@zuplo/openapi-tools": "6.73.26",
-    "@zuplo/runtime": "6.73.26",
+    "@zuplo/openapi-tools": "6.73.27",
+    "@zuplo/runtime": "6.73.27",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -61,8 +61,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "3.25.76",
-    "@zuplo/graphql": "6.73.26",
-    "@zuplo/otel": "6.73.26"
+    "@zuplo/graphql": "6.73.27",
+    "@zuplo/otel": "6.73.27"
   },
   "bundleDependencies": [
     "@inquirer/prompts",