@zuplo/cli 7.1.7 → 7.1.8

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -1153,6 +1153,12 @@ export declare interface AiUsage {
  * For streaming responses, it uses a transform stream that can block
  * content mid-stream if harmful content is detected.
  *
+ * Detect-call failures (invalid credentials, rate limits, outages) fail closed
+ * by default, returning a 502 in the route's native error format; set
+ * `onError: "allow"` in the app configuration (or in the policy options, which
+ * the app configuration overrides) to fail open and prioritize availability
+ * over inspection.
+ *
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
  * @param options - The policy options set in policies.json
@@ -1162,7 +1168,7 @@ export declare interface AiUsage {
 export declare function AkamaiAIFirewallInboundPolicy(
   request: ZuploRequest,
   context: ZuploContext,
-  _options: AkamaiAIFirewallPolicyOptions,
+  options: AkamaiAIFirewallPolicyOptions,
   _policyName: string
 ): Promise<ZuploRequest | Response>;
 
@@ -1175,6 +1181,7 @@ export declare interface AkamaiAIFirewallPolicyOptions {
   "api-key": APIKey;
   applicationId?: ApplicationID;
   streamingAccumulation?: StreamingAccumulationSettings;
+  onError?: OnFirewallError;
 }
 
 /**
@@ -1190,9 +1197,10 @@ export declare interface AkamaiAIFirewallPolicyOptions {
  * `inbound[]` chain is what enables it.
  *
  * Options are validated at request time and invalid options fail closed with a
- * ConfigurationError: detect-call failures deliberately fail open for
- * availability, so a misconfigured credential must not degrade into a silent
- * pass-through.
+ * ConfigurationError. Detect-call failures (invalid credentials, rate limits,
+ * outages) also fail closed by default, returning a 502 in the route's native
+ * error format; set `onError: "allow"` to fail open and prioritize
+ * availability over inspection.
  *
  * For streaming responses it uses a transform stream that can block content
  * mid-stream if harmful content is detected.
@@ -1221,6 +1229,7 @@ export declare interface AkamaiAIFirewallV2PolicyOptions {
   streamingAccumulation?: StreamingAccumulationSettings_2;
   endpoints?: ApplicableEndpoints_2;
   onUnknownShape?: OnUnknownShape_2;
+  onError?: OnFirewallError_2;
 }
 
 /**
@@ -10563,6 +10572,18 @@ export declare interface OktaJwtInboundPolicyOptions {
   oAuthResourceMetadataEnabled?: boolean;
 }
 
+/**
+ * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection. An onError value in the AI Gateway app configuration takes precedence over this option.
+ * @public
+ */
+declare type OnFirewallError = "block" | "allow";
+
+/**
+ * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection.
+ * @public
+ */
+declare type OnFirewallError_2 = "block" | "allow";
+
 /**
  * @public
  */

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.1.7",
+  "version": "7.1.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "7.1.7",
+  "version": "7.1.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -28,10 +28,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "7.1.7",
+    "@zuplo/core": "7.1.8",
     "@zuplo/editor": "1.0.31094607111",
-    "@zuplo/openapi-tools": "7.1.7",
-    "@zuplo/runtime": "7.1.7",
+    "@zuplo/openapi-tools": "7.1.8",
+    "@zuplo/runtime": "7.1.8",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -62,8 +62,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "4.4.3",
-    "@zuplo/graphql": "7.1.7",
-    "@zuplo/otel": "7.1.7"
+    "@zuplo/graphql": "7.1.8",
+    "@zuplo/otel": "7.1.8"
   },
   "bundleDependencies": [
     "@inquirer/prompts",