@zuplo/cli 7.1.6 → 7.1.8

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -245,19 +245,21 @@ export declare type AIGatewayCapability =
   | "audio_transcriptions";
 
 /**
- * Loads the app configuration for the request (when auth has not already) and
- * runs the inbound policy chain from that configuration.
- *
- * Place this policy on AI Gateway v2 routes after optional authentication.
- * When `ai-gateway-auth-v2-inbound` already populated the app-configuration
- * channel, this policy reuses it. Otherwise it loads the configuration with
- * the route's `app_id` path parameter. Applications select from policies
- * pre-declared by the gateway. Applications without a `inboundPolicyChain`,
- * or with an empty chain, run no application-selected policies.
- * Entry options replace the declaration's options as a complete object; omit
- * them to inherit the declaration, including environment-backed credentials.
- * Each occurrence receives a private deep copy of its entry options, so a
- * policy mutating its options cannot corrupt the cached app configuration.
+ * Loads the app configuration for the request (when auth or the configuration
+ * loader has not already) and runs the inbound policy chain from that
+ * configuration.
+ *
+ * Place this policy on AI Gateway v2 routes after optional authentication and
+ * optional `ai-gateway-configuration-loader-v2-inbound`. When either of those
+ * already populated the app-configuration channel, this policy reuses it.
+ * Otherwise it loads the configuration with the route's `app_id` path
+ * parameter. Applications select from policies pre-declared by the gateway.
+ * Applications without a `inboundPolicyChain`, or with an empty chain, run no
+ * application-selected policies. Entry options replace the declaration's
+ * options as a complete object; omit them to inherit the declaration,
+ * including environment-backed credentials. Each occurrence receives a private
+ * deep copy of its entry options, so a policy mutating its options cannot
+ * corrupt the cached app configuration.
  *
  * @title AI Gateway Configuration Executor (v2)
  * @product ai-gateway
@@ -288,6 +290,48 @@ export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {
   cacheTtlSeconds?: number;
 }
 
+/**
+ * Loads the AI Gateway app configuration for the request into the
+ * request-scoped channel and does nothing else.
+ *
+ * Place this policy on AI Gateway v2 routes before
+ * `ai-gateway-configuration-executor-v2-inbound` when you want configuration
+ * loading separated from chain execution. When `ai-gateway-auth-v2-inbound`
+ * already populated the channel, this policy reuses it. Otherwise it loads
+ * the configuration with the route's `app_id` path parameter.
+ *
+ * If this policy is omitted, the configuration executor still loads
+ * configuration itself before running the application chain.
+ *
+ * @title AI Gateway Configuration Loader (v2)
+ * @product ai-gateway
+ * @hidden
+ * @requiresAI
+ */
+export declare class AIGatewayConfigurationLoaderV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationLoaderV2InboundPolicyOptions> {
+  #private;
+  static readonly policyType = "ai-gateway-configuration-loader-v2";
+  constructor(
+    options: AIGatewayConfigurationLoaderV2InboundPolicyOptions,
+    policyName: string
+  );
+  handler(
+    request: ZuploRequest,
+    context: ZuploContext
+  ): Promise<ZuploRequest | Response>;
+}
+
+/**
+ * Options for loading each application's AI Gateway configuration into the request-scoped channel.
+ * @public
+ */
+export declare interface AIGatewayConfigurationLoaderV2InboundPolicyOptions {
+  /**
+   * The time to cache app configurations loaded by app_id. Higher values decrease latency. Cached results remain valid until the cache expires even if the configuration changes in the portal. When ai-gateway-auth-v2-inbound already loaded the configuration for the request, this cache is not used.
+   */
+  cacheTtlSeconds?: number;
+}
+
 /**
  * Adds failure and quota fallbacks to an existing AI Gateway model selection.
  *
@@ -1109,6 +1153,12 @@ export declare interface AiUsage {
  * For streaming responses, it uses a transform stream that can block
  * content mid-stream if harmful content is detected.
  *
+ * Detect-call failures (invalid credentials, rate limits, outages) fail closed
+ * by default, returning a 502 in the route's native error format; set
+ * `onError: "allow"` in the app configuration (or in the policy options, which
+ * the app configuration overrides) to fail open and prioritize availability
+ * over inspection.
+ *
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
  * @param options - The policy options set in policies.json
@@ -1118,7 +1168,7 @@ export declare interface AiUsage {
 export declare function AkamaiAIFirewallInboundPolicy(
   request: ZuploRequest,
   context: ZuploContext,
-  _options: AkamaiAIFirewallPolicyOptions,
+  options: AkamaiAIFirewallPolicyOptions,
   _policyName: string
 ): Promise<ZuploRequest | Response>;
 
@@ -1131,6 +1181,7 @@ export declare interface AkamaiAIFirewallPolicyOptions {
   "api-key": APIKey;
   applicationId?: ApplicationID;
   streamingAccumulation?: StreamingAccumulationSettings;
+  onError?: OnFirewallError;
 }
 
 /**
@@ -1146,9 +1197,10 @@ export declare interface AkamaiAIFirewallPolicyOptions {
  * `inbound[]` chain is what enables it.
  *
  * Options are validated at request time and invalid options fail closed with a
- * ConfigurationError: detect-call failures deliberately fail open for
- * availability, so a misconfigured credential must not degrade into a silent
- * pass-through.
+ * ConfigurationError. Detect-call failures (invalid credentials, rate limits,
+ * outages) also fail closed by default, returning a 502 in the route's native
+ * error format; set `onError: "allow"` to fail open and prioritize
+ * availability over inspection.
  *
  * For streaming responses it uses a transform stream that can block content
  * mid-stream if harmful content is detected.
@@ -1177,6 +1229,7 @@ export declare interface AkamaiAIFirewallV2PolicyOptions {
   streamingAccumulation?: StreamingAccumulationSettings_2;
   endpoints?: ApplicableEndpoints_2;
   onUnknownShape?: OnUnknownShape_2;
+  onError?: OnFirewallError_2;
 }
 
 /**
@@ -10519,6 +10572,18 @@ export declare interface OktaJwtInboundPolicyOptions {
   oAuthResourceMetadataEnabled?: boolean;
 }
 
+/**
+ * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection. An onError value in the AI Gateway app configuration takes precedence over this option.
+ * @public
+ */
+declare type OnFirewallError = "block" | "allow";
+
+/**
+ * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection.
+ * @public
+ */
+declare type OnFirewallError_2 = "block" | "allow";
+
 /**
  * @public
  */

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.1.6",
+  "version": "7.1.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "7.1.6",
+  "version": "7.1.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -28,10 +28,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "7.1.6",
+    "@zuplo/core": "7.1.8",
     "@zuplo/editor": "1.0.31094607111",
-    "@zuplo/openapi-tools": "7.1.6",
-    "@zuplo/runtime": "7.1.6",
+    "@zuplo/openapi-tools": "7.1.8",
+    "@zuplo/runtime": "7.1.8",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -62,8 +62,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "4.4.3",
-    "@zuplo/graphql": "7.1.6",
-    "@zuplo/otel": "7.1.6"
+    "@zuplo/graphql": "7.1.8",
+    "@zuplo/otel": "7.1.8"
   },
   "bundleDependencies": [
     "@inquirer/prompts",