@zuplo/cli 7.11.9 → 7.12.1

package/node_modules/@zuplo/runtime/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{E as p,J as c,M as u}from"../chunk-7WJVPTYD.js";import"../chunk-NUVXDVLJ.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import"../chunk-CDEAY3VY.js";import{aa as i}from"../chunk-LVSZ3WTO.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
+import{F as p,K as c,N as u}from"../chunk-VCUUI2I7.js";import"../chunk-GQMNFQTN.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import{aa as i}from"../chunk-3UPXKWR6.js";import"../chunk-UKQQD2JN.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/esm/sdks/aws/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{H as a,I as l,J as c,K as o,N as p,O as y,P as m}from"../../chunk-CDEAY3VY.js";import"../../chunk-LVSZ3WTO.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
+import{Ia as a,Ja as l,Ka as c,La as o,Oa as p,Pa as y,Qa as m}from"../../chunk-3UPXKWR6.js";import"../../chunk-UKQQD2JN.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/esm/sdks/aws/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["@zuplo/runtime/sdks/aws/sign.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;kKAiDA,eAAsBA,EACpBC,EACAC,EACkB,CAClB,IAAMC,EACJ,OAAOD,EAAQ,aAAgB,WAC3B,MAAMA,EAAQ,YAAY,EAC1BA,EAAQ,YAERE,EAASH,EAAQ,OAEjBI,EADUD,IAAW,OAASA,IAAW,QAAUH,EAAQ,MAAQ,KAClD,MAAMA,EAAQ,YAAY,EAAI,KAe/CK,EAAS,MAbA,IAAIC,EAAY,CAC7B,OAAAH,EACA,IAAKH,EAAQ,IACb,QAASA,EAAQ,QACjB,KAAAI,EACA,YAAaF,EAAY,YACzB,gBAAiBA,EAAY,gBAC7B,aAAcA,EAAY,aAC1B,QAASD,EAAQ,QACjB,OAAQA,EAAQ,OAChB,UAAWA,EAAQ,SACrB,CAAC,EAE2B,KAAK,EAEjC,OAAO,IAAI,QAAQI,EAAO,IAAI,SAAS,EAAG,CACxC,OAAQA,EAAO,OACf,QAASA,EAAO,QAChB,KAAMA,EAAO,IACf,CAAC,CACH,CAjCsBE,EAAAR,EAAA","names":["signRequest","request","options","credentials","method","body","signed","AwsV4Signer","__name"]}
+{"version":3,"sources":["@zuplo/runtime/sdks/aws/sign.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;yKAiDA,eAAsBA,EACpBC,EACAC,EACkB,CAClB,IAAMC,EACJ,OAAOD,EAAQ,aAAgB,WAC3B,MAAMA,EAAQ,YAAY,EAC1BA,EAAQ,YAERE,EAASH,EAAQ,OAEjBI,EADUD,IAAW,OAASA,IAAW,QAAUH,EAAQ,MAAQ,KAClD,MAAMA,EAAQ,YAAY,EAAI,KAe/CK,EAAS,MAbA,IAAIC,EAAY,CAC7B,OAAAH,EACA,IAAKH,EAAQ,IACb,QAASA,EAAQ,QACjB,KAAAI,EACA,YAAaF,EAAY,YACzB,gBAAiBA,EAAY,gBAC7B,aAAcA,EAAY,aAC1B,QAASD,EAAQ,QACjB,OAAQA,EAAQ,OAChB,UAAWA,EAAQ,SACrB,CAAC,EAE2B,KAAK,EAEjC,OAAO,IAAI,QAAQI,EAAO,IAAI,SAAS,EAAG,CACxC,OAAQA,EAAO,OACf,QAASA,EAAO,QAChB,KAAMA,EAAO,IACf,CAAC,CACH,CAjCsBE,EAAAR,EAAA","names":["signRequest","request","options","credentials","method","body","signed","AwsV4Signer","__name"]}

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -790,8 +790,15 @@ export { AIGatewayModelFilteringInboundPolicyOptions as AIGatewayModelFilteringV
  *   model: "gpt-5",
  *   capability: "completions",
  *   status: "active",
- *   inputCostPerToken: 0.00000125,
- *   outputCostPerToken: 0.00001,
+ *   tokenRateCard: {
+ *     revision: "aimod_123:2026-10-12T17:42:10.031877Z",
+ *     currency: "USD",
+ *     rates: [
+ *       { category: "input", costPerToken: 0.00000125 },
+ *       { category: "cache-read-input", costPerToken: 0.000000125 },
+ *       { category: "output", costPerToken: 0.00001 },
+ *     ],
+ *   },
  * };
  * ```
  */
@@ -802,10 +809,11 @@ export declare interface AIGatewayModelInfo {
   capability: "completions" | "embeddings";
   /** Whether the model is available for new routing or has been deprecated. */
   status: "active" | "deprecated";
-  /** The catalog's normalized price in USD for one input token. */
-  inputCostPerToken: number;
-  /** The catalog's normalized price in USD for one output token. */
-  outputCostPerToken: number;
+  /**
+   * The prices the AI Gateway charges for this model. Absent when the catalog
+   * has no valid prices for it; its requests are then recorded as unpriced.
+   */
+  tokenRateCard?: AIGatewayTokenRateCard;
 }
 
 /**
@@ -1344,6 +1352,76 @@ export declare interface AIGatewaySmartRouterTokenUsage {
   totalTokens: number;
 }
 
+/**
+ * One USD-per-token rate in an {@link AIGatewayTokenRateCard}.
+ *
+ * A rate applies to a request whose total input token count is within
+ * `minInputTokens` and `maxInputTokens`, inclusive; an absent bound is open.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * const longContextInput: AIGatewayTokenRate = {
+ *   category: "input",
+ *   costPerToken: 0.000006,
+ *   minInputTokens: 200001,
+ * };
+ * ```
+ */
+export declare interface AIGatewayTokenRate {
+  /** The token category this rate prices. */
+  category: AIGatewayTokenRateCategory;
+  /** The price in USD for one token. */
+  costPerToken: number;
+  /** The cache lifetime a `cache-write-input` rate applies to. */
+  cacheTtl?: "5m" | "1h";
+  /** The smallest total input token count this rate applies to. */
+  minInputTokens?: number;
+  /** The largest total input token count this rate applies to. */
+  maxInputTokens?: number;
+}
+
+/**
+ * The prices the AI Gateway charges for a model: the catalog's list prices
+ * with your project's prices applied.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * const card: AIGatewayTokenRateCard = {
+ *   revision: "aimod_123:2026-10-12T17:42:10.031877Z",
+ *   currency: "USD",
+ *   rates: [
+ *     { category: "input", costPerToken: 0.00000125 },
+ *     { category: "output", costPerToken: 0.00001 },
+ *   ],
+ * };
+ * ```
+ */
+export declare interface AIGatewayTokenRateCard {
+  /** Identifies the prices this card was built from. */
+  revision: string;
+  /** The currency of every rate. */
+  currency: "USD";
+  /** The rates, one per category, cache lifetime and input-size tier. */
+  rates: AIGatewayTokenRate[];
+}
+
+/**
+ * The token category a rate in an {@link AIGatewayTokenRateCard} prices.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * const category: AIGatewayTokenRateCategory = "cache-read-input";
+ * ```
+ */
+export declare type AIGatewayTokenRateCategory =
+  | "input"
+  | "cache-read-input"
+  | "cache-write-input"
+  | "output";
+
 /**
  * Common options every AI Gateway policy understands for scoping itself across
  * the multi-endpoint surface. A policy reads these from its own `options`.
@@ -4254,37 +4332,13 @@ declare interface CompatibilityFlags {
    */
   returnMcpToolInputErrorsAsToolResults: boolean;
   /**
-   * Whether OpenAPI schema combinators (`allOf`, `oneOf`, `anyOf`, `not`) are
-   * applied with JSON Schema semantics when an operation's schemas are turned
-   * into runtime validators. Today that is the MCP server handler: a tool's
-   * advertised `inputSchema`/`outputSchema` and its argument validation.
-   * `request-validation-inbound` already uses Ajv and is unaffected.
-   *
-   * Before this flag:
-   * - A top-level combinator is used on its own, and every keyword beside it
-   *   (`type`, `properties`, `required`, `additionalProperties`, `nullable`,
-   *   `description`, ...) is ignored. A body of
-   *   `{ type: object, properties, required, oneOf: [...] }` can be advertised
-   *   as `{ anyOf: [{}, {}] }` and accept any value.
-   * - `oneOf` behaves like `anyOf`: a value matching several branches is
-   *   accepted, and `oneOf` is advertised as `anyOf`.
-   *
-   * After this flag:
-   * - The schema's own keywords and every combinator beside them all apply,
-   *   intersected.
-   * - `oneOf` accepts a value only when exactly one branch matches, and is
-   *   advertised as `oneOf`.
-   * - Within a combinator schema and its branches: `required`,
-   *   `additionalProperties`, `minProperties` or `maxProperties` without a
-   *   `type` mark an object schema, an object schema rejects non-objects, a
-   *   `required` name that `properties` omits is enforced, a numeric or
-   *   boolean `enum` is enforced, and `unevaluatedProperties: false` is
-   *   enforced. A schema with no combinator is unchanged.
-   *
-   * The advertised schema changes for every affected tool, and calls the
-   * gateway's request validation would reject are rejected with -32602.
+   * Before this flag: MCP input schemas are converted to Zod and back to JSON
+   * Schema, and Zod may insert defaults or discard undeclared properties.
+   * After this flag: the MCP SDK validates JSON Schema directly, preserving
+   * constraints and input values. Defaults remain annotations. HTTP validation is unchanged.
+   * Opt in only on the JavaScript runtimes (workerd and Zeno).
    */
-  enforceOpenApiCombinatorSemantics: boolean;
+  useMcpDirectSchemaValidation: boolean;
 }
 
 declare interface CompletionsFallbacks {

package/node_modules/@zuplo/runtime/out/types/internal/index.d.ts

@@ -169,37 +169,13 @@ declare interface CompatibilityFlags {
    */
   returnMcpToolInputErrorsAsToolResults: boolean;
   /**
-   * Whether OpenAPI schema combinators (`allOf`, `oneOf`, `anyOf`, `not`) are
-   * applied with JSON Schema semantics when an operation's schemas are turned
-   * into runtime validators. Today that is the MCP server handler: a tool's
-   * advertised `inputSchema`/`outputSchema` and its argument validation.
-   * `request-validation-inbound` already uses Ajv and is unaffected.
-   *
-   * Before this flag:
-   * - A top-level combinator is used on its own, and every keyword beside it
-   *   (`type`, `properties`, `required`, `additionalProperties`, `nullable`,
-   *   `description`, ...) is ignored. A body of
-   *   `{ type: object, properties, required, oneOf: [...] }` can be advertised
-   *   as `{ anyOf: [{}, {}] }` and accept any value.
-   * - `oneOf` behaves like `anyOf`: a value matching several branches is
-   *   accepted, and `oneOf` is advertised as `anyOf`.
-   *
-   * After this flag:
-   * - The schema's own keywords and every combinator beside them all apply,
-   *   intersected.
-   * - `oneOf` accepts a value only when exactly one branch matches, and is
-   *   advertised as `oneOf`.
-   * - Within a combinator schema and its branches: `required`,
-   *   `additionalProperties`, `minProperties` or `maxProperties` without a
-   *   `type` mark an object schema, an object schema rejects non-objects, a
-   *   `required` name that `properties` omits is enforced, a numeric or
-   *   boolean `enum` is enforced, and `unevaluatedProperties: false` is
-   *   enforced. A schema with no combinator is unchanged.
-   *
-   * The advertised schema changes for every affected tool, and calls the
-   * gateway's request validation would reject are rejected with -32602.
+   * Before this flag: MCP input schemas are converted to Zod and back to JSON
+   * Schema, and Zod may insert defaults or discard undeclared properties.
+   * After this flag: the MCP SDK validates JSON Schema directly, preserving
+   * constraints and input values. Defaults remain annotations. HTTP validation is unchanged.
+   * Opt in only on the JavaScript runtimes (workerd and Zeno).
    */
-  enforceOpenApiCombinatorSemantics: boolean;
+  useMcpDirectSchemaValidation: boolean;
 }
 
 /**

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.11.9",
+  "version": "7.12.1",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "7.11.9",
+  "version": "7.12.1",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -31,10 +31,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "7.11.9",
+    "@zuplo/core": "7.12.1",
     "@zuplo/editor": "1.0.33162667821",
-    "@zuplo/openapi-tools": "7.11.9",
-    "@zuplo/runtime": "7.11.9",
+    "@zuplo/openapi-tools": "7.12.1",
+    "@zuplo/runtime": "7.12.1",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -65,15 +65,15 @@
     "workerd": "1.20261002.1",
     "yargs": "17.7.2",
     "zod": "4.4.3",
-    "@zuplo/graphql": "7.11.9",
-    "@zuplo/otel": "7.11.9"
+    "@zuplo/graphql": "7.12.1",
+    "@zuplo/otel": "7.12.1"
   },
   "optionalDependencies": {
-    "@zuplo/lint-darwin-arm64": "7.11.9",
-    "@zuplo/lint-darwin-x64": "7.11.9",
-    "@zuplo/lint-linux-x64": "7.11.9",
-    "@zuplo/lint-linux-arm64": "7.11.9",
-    "@zuplo/lint-win32-x64": "7.11.9"
+    "@zuplo/lint-darwin-arm64": "7.12.1",
+    "@zuplo/lint-darwin-x64": "7.12.1",
+    "@zuplo/lint-linux-x64": "7.12.1",
+    "@zuplo/lint-linux-arm64": "7.12.1",
+    "@zuplo/lint-win32-x64": "7.12.1"
   },
   "bundleDependencies": [
     "@inquirer/prompts",