@zuplo/cli 7.12.3 → 7.12.4

package/node_modules/@zuplo/runtime/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{F as p,K as c,N as u}from"../chunk-JBEZQ336.js";import"../chunk-GQMNFQTN.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import{aa as i}from"../chunk-3UPXKWR6.js";import"../chunk-UKQQD2JN.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
+import{F as p,K as c,N as u}from"../chunk-WTWRZT3M.js";import"../chunk-WIQFTAJL.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import{aa as i}from"../chunk-RH345HSZ.js";import"../chunk-UKQQD2JN.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/esm/sdks/aws/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{Ia as a,Ja as l,Ka as c,La as o,Oa as p,Pa as y,Qa as m}from"../../chunk-3UPXKWR6.js";import"../../chunk-UKQQD2JN.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
+import{Ia as a,Ja as l,Ka as c,La as o,Oa as p,Pa as y,Qa as m}from"../../chunk-RH345HSZ.js";import"../../chunk-UKQQD2JN.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
 //# sourceMappingURL=index.js.map

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -4306,29 +4306,30 @@ declare interface CompatibilityFlags {
    */
   return501ForUnsupportedHttpMethods: boolean;
   /**
-   * Whether the MCP server handler leaves the non-standard
-   * `capabilities.tools.supported` and `capabilities.tools.available` fields
-   * out of its `initialize` response.
+   * Retired: still accepted in `compatibilityFlags`, with no effect.
    *
-   * Before this flag: `initialize` returns `supported: true` and lists every
-   * registered tool name in `available`, to every caller.
+   * The MCP server handler's `initialize` returns `capabilities.tools: {}` for
+   * every project, without the non-standard `supported` and `available`
+   * fields this flag used to remove. Clients discover tools with
+   * `tools/list`. See `packages/runtime/specs/mcp-json-rpc.md`, MCPRPC-26 to
+   * MCPRPC-28.
    *
-   * After this flag: `initialize` returns `capabilities.tools: {}`. Clients
-   * discover tools with `tools/list`, as the MCP spec defines.
+   * @deprecated The behavior is unconditional; listing the flag changes
+   * nothing.
    */
   removeMcpToolsCapabilityExtension: boolean;
   /**
-   * Whether the MCP server handler reports a `tools/call` whose arguments fail
-   * the tool's `inputSchema` as a tool result with `isError: true`, as
-   * MCP 2025-11-25 specifies for input validation errors.
+   * Retired: still accepted in `compatibilityFlags`, with no effect.
    *
-   * Before this flag: Invalid arguments return a JSON-RPC `-32602` error.
+   * For every project, when the request's `MCP-Protocol-Version` header is
+   * `2025-11-25` or later, a `tools/call` whose arguments fail the tool's
+   * `inputSchema` returns a result with `isError: true` and the validation
+   * message as text content, and the tool is not called. Earlier or missing
+   * protocol versions return a JSON-RPC `-32602` error. See
+   * `packages/runtime/specs/mcp-json-rpc.md`, MCPRPC-19 to MCPRPC-25.
    *
-   * After this flag: When the request's `MCP-Protocol-Version` header is
-   * `2025-11-25` or later, invalid arguments return a result with
-   * `isError: true` and the validation message as text content, and the tool
-   * is not called. Earlier or missing protocol versions still return
-   * `-32602`. Unknown tools and malformed requests return `-32602` either way.
+   * @deprecated The behavior is unconditional; listing the flag changes
+   * nothing.
    */
   returnMcpToolInputErrorsAsToolResults: boolean;
   /**
@@ -4339,6 +4340,56 @@ declare interface CompatibilityFlags {
    * Opt in only on the JavaScript runtimes (workerd and Zeno).
    */
   useMcpDirectSchemaValidation: boolean;
+  /**
+   * Whether the MCP server handler rewrites tool names to follow the MCP tool
+   * naming rule: 1 to 128 characters of `A-Z`, `a-z`, `0-9`, `_`, `-` and
+   * `.`, unique within the server (MCP 2025-11-25, server/tools#tool-names).
+   *
+   * Before this flag: Each tool is advertised and called by its configured
+   * name (`x-zuplo-route.mcp.name`, or the operationId) as is, including
+   * spaces, `/` and names over 128 characters. When a tool from the
+   * deprecated `files` option reuses the name of a tool from `operations`
+   * (or a content-type suffix repeats another tool's name), the later tool
+   * replaces the earlier one.
+   *
+   * After this flag: A name that already follows the rule is unchanged. In
+   * any other name, each character outside the allowed set becomes `_`, an
+   * empty name becomes `tool`, and the name is cut to 128 characters. A
+   * rewritten or repeated name that is already taken gets `_2`, `_3`, and so
+   * on, in registration order, still within 128 characters, so both tools
+   * stay. `tools/list`, `tools/call` and analytics use the advertised name,
+   * and `tools/call` no longer accepts the configured name of a rewritten
+   * tool. Two operations with the same `x-zuplo-route.mcp.name` still stop
+   * the server from starting, as before.
+   *
+   * The build warns about every name that breaks the rule or repeats, with or
+   * without this flag. Set `x-zuplo-route.mcp.name` to keep a name stable.
+   */
+  sanitizeMcpToolNames: boolean;
+  /**
+   * Whether the MCP server handler leaves out of its responses the fields
+   * that protocol revisions newer than the request's added.
+   *
+   * Before this flag: Every response carries every field on every protocol
+   * version, so a `2025-03-26` client gets `outputSchema` on `tools/list` and
+   * `structuredContent` on `tools/call`.
+   *
+   * After this flag: The request's `MCP-Protocol-Version` header, or
+   * `2025-03-26` when it is missing, decides which fields are sent:
+   *
+   * - Before `2025-06-18`: tools leave out `outputSchema` and `title`,
+   *   resources leave out `title`, and `tools/call` results leave out
+   *   `structuredContent` (when the result has no text block, its JSON is
+   *   added as one). In `tools/call` and `prompts/get` content, annotations
+   *   leave out `lastModified` and a `resource_link` block becomes a text
+   *   block holding the link as JSON.
+   * - Before `2025-11-25`: tools leave out `icons` and `execution`, and
+   *   resources and resource links leave out `icons`.
+   * - Before `2025-03-26`: tools also leave out `annotations`.
+   *
+   * `_meta` is sent on every version.
+   */
+  omitMcpFieldsNewerThanNegotiatedVersion: boolean;
 }
 
 declare interface CompletionsFallbacks {
@@ -4526,6 +4577,61 @@ declare interface ComputerUseTool {
   environment: "windows" | "mac" | "linux" | "ubuntu" | "browser";
 }
 
+/**
+ * The identifying element of the request that enforces distinct rate limits. For example, you can limit by `user`, `ip`, `function` or `all` - function allows you to specify a simple function to create a string identifier to create a rate-limit group.
+ * @public
+ */
+declare type ConcurrencyLimitBy = "user" | "ip" | "function" | "all";
+
+/**
+ * Adds the retry-after header.
+ * @public
+ */
+declare type ConcurrencyLimitHeaderMode = "none" | "retry-after";
+
+/**
+ * Limits active request/response leases. Expiry frees capacity without ending
+ * the request. Regional replication provides an approximate global limit.
+ * @title Concurrency Limiting
+ * @hidden
+ * @public
+ */
+export declare const ConcurrencyLimitInboundPolicy: InboundPolicyHandler<ConcurrencyLimitInboundPolicyOptions>;
+
+/**
+ * The options for this policy.
+ * @public
+ */
+export declare interface ConcurrencyLimitInboundPolicyOptions {
+  rateLimitBy: ConcurrencyLimitBy;
+  /**
+   * Maximum active request leases in this bucket.
+   */
+  requestsAllowed: number;
+  /**
+   * The function that returns dynamic configuration data. Used only with `rateLimitBy=function`.
+   */
+  identifier?: {
+    /**
+     * used only with rateLimitBy=function. Specifies the export to load your custom bucket function, e.g. `default`, `rateLimitIdentifier`.
+     */
+    export: string;
+    /**
+     * Specifies the module to load your custom bucket function, in the format `$import(./modules/my-module)`.
+     */
+    module: string;
+  };
+  headerMode?: ConcurrencyLimitHeaderMode;
+  /**
+   * If true, the policy will throw an error in the event there is a problem connecting to the rate limit service.
+   */
+  throwOnFailure?: boolean;
+  /**
+   * Fixed lease duration. Expiry frees capacity without terminating the request. Five minutes caps shared storage retention.
+   */
+  leaseSeconds?: number;
+}
+
 /**
  * Errors caused by invalid user configuration such as invalid parameters on policies,
  * handlers that are not functions, or missing required configuration values.
@@ -4833,6 +4939,24 @@ export declare interface CurityPhantomTokenInboundPolicyOptions {
   cacheDurationSeconds?: number;
 }
 
+/** Custom bucket identity and optional fixed-lease overrides. @public */
+export declare interface CustomConcurrencyLimitDetails {
+  key: string;
+  requestsAllowed?: number;
+  leaseSeconds?: number;
+}
+
+/** Returning null or undefined exempts this request. @public */
+export declare type CustomConcurrencyLimitFunction = (
+  request: ZuploRequest,
+  context: ZuploContext,
+  policyName: string
+) =>
+  | CustomConcurrencyLimitDetails
+  | null
+  | undefined
+  | Promise<CustomConcurrencyLimitDetails | null | undefined>;
+
 declare type CustomLogFields = Record<string, number | string | boolean>;
 
 /**

package/node_modules/@zuplo/runtime/out/types/internal/index.d.ts

@@ -4,6 +4,23 @@ export declare interface ApiRuntimeConfig {
   urls: UrlConfig | undefined;
 }
 
+/**
+ * Assigns each tool a name that follows the MCP tool naming rule and is
+ * unique among `names`, deterministically. `names` are the configured names
+ * in registration order and may repeat; the result has the advertised name
+ * at the same index.
+ *
+ * 1. A name that already follows the rule keeps it, the first time it
+ *    appears. So turning `sanitizeMcpToolNames` on never renames a tool whose
+ *    name was already valid and unique.
+ * 2. Every other name, in registration order, gets
+ *    {@link sanitizeMcpToolName}, plus `_2`, `_3`, … when that name is
+ *    taken. The suffix replaces the end of a name that would otherwise
+ *    exceed 128 characters.
+ * @param names - configured tool names, in registration order
+ */
+export declare function assignMcpToolNames(names: readonly string[]): string[];
+
 /**
  * Base logger interface with methods for each log level.
  * @beta
@@ -143,29 +160,30 @@ declare interface CompatibilityFlags {
    */
   return501ForUnsupportedHttpMethods: boolean;
   /**
-   * Whether the MCP server handler leaves the non-standard
-   * `capabilities.tools.supported` and `capabilities.tools.available` fields
-   * out of its `initialize` response.
+   * Retired: still accepted in `compatibilityFlags`, with no effect.
    *
-   * Before this flag: `initialize` returns `supported: true` and lists every
-   * registered tool name in `available`, to every caller.
+   * The MCP server handler's `initialize` returns `capabilities.tools: {}` for
+   * every project, without the non-standard `supported` and `available`
+   * fields this flag used to remove. Clients discover tools with
+   * `tools/list`. See `packages/runtime/specs/mcp-json-rpc.md`, MCPRPC-26 to
+   * MCPRPC-28.
    *
-   * After this flag: `initialize` returns `capabilities.tools: {}`. Clients
-   * discover tools with `tools/list`, as the MCP spec defines.
+   * @deprecated The behavior is unconditional; listing the flag changes
+   * nothing.
    */
   removeMcpToolsCapabilityExtension: boolean;
   /**
-   * Whether the MCP server handler reports a `tools/call` whose arguments fail
-   * the tool's `inputSchema` as a tool result with `isError: true`, as
-   * MCP 2025-11-25 specifies for input validation errors.
+   * Retired: still accepted in `compatibilityFlags`, with no effect.
    *
-   * Before this flag: Invalid arguments return a JSON-RPC `-32602` error.
+   * For every project, when the request's `MCP-Protocol-Version` header is
+   * `2025-11-25` or later, a `tools/call` whose arguments fail the tool's
+   * `inputSchema` returns a result with `isError: true` and the validation
+   * message as text content, and the tool is not called. Earlier or missing
+   * protocol versions return a JSON-RPC `-32602` error. See
+   * `packages/runtime/specs/mcp-json-rpc.md`, MCPRPC-19 to MCPRPC-25.
    *
-   * After this flag: When the request's `MCP-Protocol-Version` header is
-   * `2025-11-25` or later, invalid arguments return a result with
-   * `isError: true` and the validation message as text content, and the tool
-   * is not called. Earlier or missing protocol versions still return
-   * `-32602`. Unknown tools and malformed requests return `-32602` either way.
+   * @deprecated The behavior is unconditional; listing the flag changes
+   * nothing.
    */
   returnMcpToolInputErrorsAsToolResults: boolean;
   /**
@@ -176,6 +194,56 @@ declare interface CompatibilityFlags {
    * Opt in only on the JavaScript runtimes (workerd and Zeno).
    */
   useMcpDirectSchemaValidation: boolean;
+  /**
+   * Whether the MCP server handler rewrites tool names to follow the MCP tool
+   * naming rule: 1 to 128 characters of `A-Z`, `a-z`, `0-9`, `_`, `-` and
+   * `.`, unique within the server (MCP 2025-11-25, server/tools#tool-names).
+   *
+   * Before this flag: Each tool is advertised and called by its configured
+   * name (`x-zuplo-route.mcp.name`, or the operationId) as is, including
+   * spaces, `/` and names over 128 characters. When a tool from the
+   * deprecated `files` option reuses the name of a tool from `operations`
+   * (or a content-type suffix repeats another tool's name), the later tool
+   * replaces the earlier one.
+   *
+   * After this flag: A name that already follows the rule is unchanged. In
+   * any other name, each character outside the allowed set becomes `_`, an
+   * empty name becomes `tool`, and the name is cut to 128 characters. A
+   * rewritten or repeated name that is already taken gets `_2`, `_3`, and so
+   * on, in registration order, still within 128 characters, so both tools
+   * stay. `tools/list`, `tools/call` and analytics use the advertised name,
+   * and `tools/call` no longer accepts the configured name of a rewritten
+   * tool. Two operations with the same `x-zuplo-route.mcp.name` still stop
+   * the server from starting, as before.
+   *
+   * The build warns about every name that breaks the rule or repeats, with or
+   * without this flag. Set `x-zuplo-route.mcp.name` to keep a name stable.
+   */
+  sanitizeMcpToolNames: boolean;
+  /**
+   * Whether the MCP server handler leaves out of its responses the fields
+   * that protocol revisions newer than the request's added.
+   *
+   * Before this flag: Every response carries every field on every protocol
+   * version, so a `2025-03-26` client gets `outputSchema` on `tools/list` and
+   * `structuredContent` on `tools/call`.
+   *
+   * After this flag: The request's `MCP-Protocol-Version` header, or
+   * `2025-03-26` when it is missing, decides which fields are sent:
+   *
+   * - Before `2025-06-18`: tools leave out `outputSchema` and `title`,
+   *   resources leave out `title`, and `tools/call` results leave out
+   *   `structuredContent` (when the result has no text block, its JSON is
+   *   added as one). In `tools/call` and `prompts/get` content, annotations
+   *   leave out `lastModified` and a `resource_link` block becomes a text
+   *   block holding the link as JSON.
+   * - Before `2025-11-25`: tools leave out `icons` and `execution`, and
+   *   resources and resource links leave out `icons`.
+   * - Before `2025-03-26`: tools also leave out `annotations`.
+   *
+   * `_meta` is sent on every version.
+   */
+  omitMcpFieldsNewerThanNegotiatedVersion: boolean;
 }
 
 /**
@@ -202,6 +270,15 @@ declare interface CorsPolicyConfiguration {
   exposeHeaders?: string[] | string;
 }
 
+/**
+ * Says how `name` breaks the MCP tool naming rule, or returns `undefined`
+ * when it follows it. The reasons are customer-facing (build warnings).
+ * @param name - a tool name
+ */
+export declare function describeMcpToolNameProblem(
+  name: string
+): string | undefined;
+
 /* Excluded from this release type: DevPortalRuntimeConfig */
 
 export declare type DevPortalType = "legacy" | "zudoku";

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.12.3",
+  "version": "7.12.4",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/fast-uri/.github/workflows/release.yml

@@ -0,0 +1,35 @@
+name: Release the package
+
+on:
+  workflow_dispatch:
+    inputs:
+      semver:
+        description: 'Release bump type'
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+          - prepatch
+          - preminor
+          - premajor
+          - prerelease
+      preid:
+        description: 'Prerelease identifier (e.g. rc), used by the pre* bump types'
+        required: false
+        type: string
+
+permissions: {}
+
+jobs:
+  release:
+    permissions:
+      id-token: write # required for npm provenance via OIDC
+      contents: write # required to push the release commit and the tag
+    uses: fastify/workflows/.github/workflows/reusable-release.yml@b0a2ab2d8259b6bd574b804cd6874bbd75c3577c
+    with:
+      semver: ${{ inputs.semver }}
+      preid: ${{ inputs.preid }}
+      dist-tag: ${{ startsWith(inputs.semver, 'pre') && 'three-next' || 'three' }}
+      make-latest: false

package/node_modules/fast-uri/README.md

@@ -14,12 +14,18 @@ All of the above functions can accept an additional options argument that is an
 
 Malformed authorities and out-of-range ports are reported through the parsed component's `error` field. `normalize()` leaves malformed string inputs unchanged, and `equal()` returns `false` when either string input is malformed.
 
+Schemes are never percent-decoded. RFC 3986 does not allow percent-encoding in a scheme, so an input such as `%6Aavascript:alert(1)` is reported as malformed (`error: 'URI scheme is malformed.'`) instead of being parsed as `javascript:`. `normalize()` leaves it unchanged, `equal()` returns `false`, and `resolve()` and `serialize()` throw.
+
+For schemes with domain hosts (`http`, `https`, `ws`, `wss`, or any scheme with the `domainHost` option), a host containing an ASCII character that RFC 3986 does not allow in a reg-name (for example `@`, TAB, LF, CR, space, `"`, `<`, `>`, `^`, `` ` ``, `{`, `|`, `}`) is reported as malformed (`error: 'URI host is malformed.'`). It is never passed through a WHATWG URL parser that could treat `@` as a delimiter or strip whitespace. `normalize()` leaves such input unchanged, `equal()` returns `false`, and `resolve()` throws.
+
 *	`scheme` (string)
 	Indicates the scheme that the URI should be treated as, overriding the URI's normal scheme parsing behavior.
 
 *	`reference` (string)
 	If set to `"suffix"`, it indicates that the URI is in the suffix format and the parser will use the option's `scheme` property to determine the URI's scheme.
 
+	A suffix reference is written without its scheme and without the `//` authority marker (RFC 3986 section 4.5). Such a reference is inherently ambiguous: an authority component cannot always be distinguished from a path. When the input carries an authority of the form `host:port` (for example `//javascript:80/x`) or a userinfo containing a colon, the serialized suffix output can begin with text that reparses as a URI scheme (for example `javascript:80/x`). Do not treat suffix output as a trusted absolute URL, and do not render it or use it in a scheme allowlist without first validating it with `parse()`. If you need an unambiguous result, use the default (non-suffix) serialization.
+
 *	`tolerant` (boolean, false)
 	If set to `true`, the parser will relax URI resolving rules.
 
@@ -79,6 +85,8 @@ uri.normalize('http://example.com/a%2Fb')
 
 Reserved path escapes such as `%2F` and `%2E` are preserved as path data during normalization and comparison.
 
+Dot segments in relative references are removed without changing what the reference resolves to: leading `..` segments that cannot be collapsed are kept, a relative path is never turned into a root-relative one, and a first-segment colon exposed by the removal is kept behind a leading `./` so the reference is not reparsed as a scheme (`a/../b` → `b`, `../x` → `../x`, `x/..` → `./`, `a/../a:b` → `./a:b`).
+
 ### Equal
 
 ```js