@zuplo/cli 7.2.0 → 7.2.2

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -140,8 +140,7 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
 }
 
 /**
- * Authenticates requests to an AI Gateway v2 endpoint with application API
- * keys.
+ * Authenticates requests to an AI Gateway endpoint with application API keys.
  *
  * Add this policy to an application's `inboundPolicyChain` to require a key
  * for that app only, or place it on the route before the configuration
@@ -156,9 +155,8 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
  * `/:app_id/(.*)`), this policy also requires
  * `configuration.id === request.params.app_id` and returns 403 on mismatch.
  *
- * @title AI Gateway Authentication (v2)
+ * @title AI Gateway Authentication
  * @product ai-gateway
- * @hidden
  * @requiresAI
  * @public
  *
@@ -170,7 +168,7 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
  *
  * @example
  * ```json
- * // policies.json - Authenticate an AI Gateway v2 route
+ * // policies.json - Authenticate an AI Gateway route
  * {
  *   "name": "ai-gateway-auth",
  *   "policyType": "ai-gateway-auth-v2",
@@ -249,7 +247,7 @@ export declare type AIGatewayCapability =
  * loader has not already) and runs the inbound policy chain from that
  * configuration.
  *
- * Place this policy on AI Gateway v2 routes after optional authentication and
+ * Place this policy on AI Gateway routes after optional authentication and
  * optional `ai-gateway-configuration-loader-v2-inbound`. When either of those
  * already populated the app-configuration channel, this policy reuses it.
  * Otherwise it loads the configuration with the route's `app_id` path
@@ -261,9 +259,8 @@ export declare type AIGatewayCapability =
  * deep copy of its entry options, so a policy mutating its options cannot
  * corrupt the cached app configuration.
  *
- * @title AI Gateway Configuration Executor (v2)
+ * @title AI Gateway Configuration Executor
  * @product ai-gateway
- * @hidden
  * @requiresAI
  */
 export declare class AIGatewayConfigurationExecutorV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationExecutorV2InboundPolicyOptions> {
@@ -294,7 +291,7 @@ export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {
  * Loads the AI Gateway app configuration for the request into the
  * request-scoped channel and does nothing else.
  *
- * Place this policy on AI Gateway v2 routes before
+ * Place this policy on AI Gateway routes before
  * `ai-gateway-configuration-executor-v2-inbound` when you want configuration
  * loading separated from chain execution. When `ai-gateway-auth-v2-inbound`
  * already populated the channel, this policy reuses it. Otherwise it loads
@@ -303,9 +300,8 @@ export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {
  * If this policy is omitted, the configuration executor still loads
  * configuration itself before running the application chain.
  *
- * @title AI Gateway Configuration Loader (v2)
+ * @title AI Gateway Configuration Loader
  * @product ai-gateway
- * @hidden
  * @requiresAI
  */
 export declare class AIGatewayConfigurationLoaderV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationLoaderV2InboundPolicyOptions> {
@@ -333,10 +329,9 @@ export declare interface AIGatewayConfigurationLoaderV2InboundPolicyOptions {
 }
 
 /**
- * AI Gateway DLP Inbound Policy
- * @title AI Gateway DLP
+ * Data Loss Prevention (DLP) Inbound Policy for the AI Gateway
+ * @title Data Loss Prevention (DLP)
  * @product ai-gateway
- * @hidden
  * @requiresAI
  *
  * Scans the content of AI requests and responses — system prompts, message
@@ -366,7 +361,7 @@ export declare function AIGatewayDlpInboundPolicy(
 ): Promise<ZuploRequest | Response>;
 
 /**
- * The options for the AI Gateway DLP policy. Scans the content of AI requests and responses — system prompts, messages, and tool-call arguments — for sensitive data such as credit cards, national identifiers, and API keys, applying a per-rule action (mask, block, or log). Detection runs entirely inside the gateway and streaming responses are scanned as they stream.
+ * The options for the Data Loss Prevention (DLP) policy. Scans the content of AI requests and responses — system prompts, messages, and tool-call arguments — for sensitive data such as credit cards, national identifiers, and API keys, applying a per-rule action (mask, block, or log). Detection runs entirely inside the gateway and streaming responses are scanned as they stream.
  * @public
  */
 export declare interface AIGatewayDlpInboundPolicyOptions {
@@ -379,10 +374,6 @@ export declare interface AIGatewayDlpInboundPolicyOptions {
    * Exact strings that are never flagged by any rule — documentation samples like Stripe's public test card `4242 4242 4242 4242`, or your own support email address. Matching is case-sensitive against the exact detected text, including when a value arrives split across streaming chunks.
    */
   allowValues?: string[];
-  /**
-   * The replacement text for masked matches. The `{type}` token inserts the detected type id in UPPER_SNAKE form (for example `[CONTACT_EMAIL]`), which keeps masked conversations legible to the model. Individual rules can override this.
-   */
-  mask?: string;
   /**
    * Default evidence level for rules that do not set their own. See the per-rule `detection` description for the level semantics. There are no numeric confidence thresholds to tune — levels are the whole dial.
    */
@@ -404,11 +395,10 @@ export declare interface AIGatewayDlpInboundPolicyOptions {
 /**
  * Adds failure and quota fallbacks to an existing AI Gateway model selection.
  *
- * Place this policy after AI Gateway Model Filtering (v2). It never creates a
+ * Place this policy after AI Gateway Model Filtering. It never creates a
  * model selection, so a misplaced policy cannot bypass filtering.
  *
- * @title AI Gateway Fallback Model (v2)
- * @beta
+ * @title AI Gateway Fallback Model
  * @product ai-gateway
  * @requiresAI
  * @param request - The ZuploRequest
@@ -607,7 +597,7 @@ export declare interface AIGatewayMeteringInboundPolicyOptions {
 }
 
 /**
- * Meters AI Gateway v2 usage and enforces app and ancestor usage limits.
+ * Meters AI Gateway usage and enforces app and ancestor usage limits.
  *
  * Limits configured on parent teams or the bucket root are enforced through a
  * server-side hierarchical check.
@@ -615,8 +605,7 @@ export declare interface AIGatewayMeteringInboundPolicyOptions {
  * The authentication policy must run before this policy so the app
  * configuration id is available for meter storage and analytics.
  *
- * @title AI Gateway Metering (v2)
- * @beta
+ * @title AI Gateway Metering
  * @product ai-gateway
  * @requiresAI
  * @param request - The ZuploRequest
@@ -688,7 +677,7 @@ export declare class AIGatewayMeteringV2InboundPolicy extends InboundPolicy<AIGa
 }
 
 /**
- * Options for metering AI Gateway v2 usage and enforcing request-time limits.
+ * Options for metering AI Gateway usage and enforcing request-time limits.
  * @public
  */
 export declare interface AIGatewayMeteringV2InboundPolicyOptions {
@@ -739,8 +728,7 @@ declare interface AIGatewayMeteringV2WarningLimitOverride {
  * Matches AI Gateway requests against curated allow lists or open block lists,
  * then stores the winning model reference for the route handler.
  *
- * @title AI Gateway Model Filtering (v2)
- * @beta
+ * @title AI Gateway Model Filtering
  * @product ai-gateway
  * @requiresAI
  * @param request - The ZuploRequest
@@ -1024,10 +1012,9 @@ export declare function AIGatewaySemanticCacheOutboundPolicy(
 export declare interface AIGatewaySemanticCacheOutboundPolicyOptions {}
 
 /**
- * AI Gateway Semantic Cache policy (AI Gateway v2). A single inbound policy that
- * looks up the semantic cache on entry and, on a miss, registers a
- * response-sending hook to write the upstream response back into the cache —
- * matching the firewall's single-policy shape (no separate outbound policy).
+ * AI Gateway Semantic Cache policy. This inbound policy looks up the semantic
+ * cache on entry and, on a miss, registers a response-sending hook to write the
+ * upstream response back into the cache.
  *
  * Caching parameters (semanticTolerance, expirationSecondsTtl, namespace,
  * recentMessageCount) come from the policy options, and presence in the
@@ -1041,13 +1028,12 @@ export declare interface AIGatewaySemanticCacheOutboundPolicyOptions {}
  * Cache outcomes are reported on the response via the RFC 9211 `Cache-Status`
  * header under the cache name `zp-aigw-sem-cache` (hit:
  * `zp-aigw-sem-cache; hit; detail="similarity=0.93"`; miss:
- * `zp-aigw-sem-cache; fwd=miss; stored`) alongside the legacy
- * `x-ai-gateway-cache: HIT|MISS` and `x-ai-gateway-cache-similarity` headers,
- * kept for compatibility.
+ * `zp-aigw-sem-cache; fwd=miss; stored`). Responses also include the
+ * `x-ai-gateway-cache: HIT|MISS` and `x-ai-gateway-cache-similarity` headers.
  *
- * @title AI Gateway Semantic Cache (v2)
+ * @title AI Gateway Semantic Cache
  * @product ai-gateway
- * @hidden
+ * @enterprise
  * @requiresAI
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
@@ -1063,7 +1049,7 @@ export declare function AIGatewaySemanticCacheV2InboundPolicy(
 ): Promise<Response | ZuploRequest<RequestGeneric>>;
 
 /**
- * Options for the AI Gateway Semantic Cache (v2) policy. Configured inline in policies.json; the policy reads nothing from the AI Gateway configuration to decide whether to cache.
+ * Options for the AI Gateway Semantic Cache policy. Configured inline in policies.json; the policy reads nothing from the AI Gateway configuration to decide whether to cache.
  * @public
  */
 export declare interface AIGatewaySemanticCacheV2InboundPolicyOptions {
@@ -1218,6 +1204,7 @@ export declare interface AiUsage {
  * Akamai AI Firewall Inbound Policy
  * @title Akamai AI Firewall
  * @product ai-gateway
+ * @hidden
  * @requiresAI
  *
  * This policy integrates with Akamai's AI Firewall service to detect and block
@@ -1259,10 +1246,9 @@ export declare interface AkamaiAIFirewallPolicyOptions {
 }
 
 /**
- * Akamai AI Firewall Inbound Policy (AI Gateway v2)
- * @title Akamai AI Firewall (v2)
+ * Akamai AI Firewall Inbound Policy
+ * @title Akamai AI Firewall
  * @product ai-gateway
- * @hidden
  * @requiresAI
  *
  * Detects and blocks malicious AI inputs and outputs via Akamai's AI Firewall
@@ -3758,6 +3744,7 @@ export declare interface CognitoJwtInboundPolicyOptions {
  * Comet Opik Tracing Inbound Policy
  * @title Comet Opik Tracing
  * @product ai-gateway
+ * @hidden
  *
  * This policy automatically handles tracing for both streaming and non-streaming
  * responses from AI Gateway. It creates traces when requests start and spans
@@ -3804,10 +3791,9 @@ export declare interface CometOpikTracingPolicyOptions {
 }
 
 /**
- * Comet Opik Tracing Inbound Policy (AI Gateway v2)
- * @title Comet Opik Tracing (v2)
+ * Comet Opik Tracing Inbound Policy
+ * @title Comet Opik Tracing
  * @product ai-gateway
- * @hidden
  * @requiresAI
  *
  * Traces both streaming and non-streaming AI Gateway responses to Comet Opik,
@@ -4871,19 +4857,23 @@ declare interface DlpCustomRule {
    */
   context?: string[];
   /**
-   * What happens when this type is found. `mask` replaces the matched text with a placeholder and the conversation continues; `block` rejects the request or terminates the response with an error naming only the detected types (never the values); `log` records a finding and lets the traffic pass unchanged — use it to trial a rule before enforcing it; `off` excludes this type from a group enabled by a broader key.
+   * What happens when this rule matches, in BOTH directions. `mask` replaces the matched text with a placeholder and the conversation continues; `block` rejects the request or terminates the response with an error naming only the rule's name (never the values); `log` records a finding and lets the traffic pass unchanged; `off` disables the rule. A rule states either `action` or the directional pair (`inboundAction`/`outboundAction`), never both.
    */
-  action: "mask" | "block" | "log" | "off";
+  action?: "mask" | "block" | "log" | "off";
   /**
-   * Where the rule applies. `inbound` scans what callers send the model (system prompt, message text, and tool-call arguments); `outbound` scans what the model sends back (buffered responses whole, streaming responses chunk by chunk). Defaults to `both`.
+   * What happens when this rule matches in what callers send the model. Use with `outboundAction` to give the rule different behavior per direction. Omitting it (or `off`) leaves the inbound direction unscanned for this rule. Cannot be combined with `action`.
    */
-  direction?: "both" | "inbound" | "outbound";
+  inboundAction?: "mask" | "block" | "log" | "off";
+  /**
+   * What happens when this rule matches in what the model sends back. Omitting it (or `off`) leaves the outbound direction unscanned for this rule. Cannot be combined with `action`.
+   */
+  outboundAction?: "mask" | "block" | "log" | "off";
   /**
    * How much evidence a match needs before this rule acts. `corroborated` additionally requires one of the type's context words near the match (types that define no context words behave as `standard`); `standard` uses the catalog as tuned — distinctive shapes act on their own while ambiguous shapes need nearby context; `aggressive` counts every pattern match and is false-positive-prone — pair it with the `log` action for audits. Overrides the policy-level `detection` for this rule.
    */
   detection?: "corroborated" | "standard" | "aggressive";
   /**
-   * Replacement text for this rule when `action` is `mask`, overriding the policy-level `mask`. The `{type}` token inserts the detected type id in UPPER_SNAKE form (for example `[CONTACT_EMAIL]`).
+   * Replacement text for this rule's masked matches. The `{type}` token inserts the detected type id in UPPER_SNAKE form, so the default turns a matched email into `[CONTACT_EMAIL]` — typed placeholders keep masked conversations legible to the model. Set a literal like `[REDACTED]` to hide the type.
    */
   mask?: string;
   partialMask?: DlpPartialMask;
@@ -4898,26 +4888,30 @@ declare interface DlpPartialMask {
 
 declare interface DlpRule {
   /**
-   * What happens when this type is found. `mask` replaces the matched text with a placeholder and the conversation continues; `block` rejects the request or terminates the response with an error naming only the detected types (never the values); `log` records a finding and lets the traffic pass unchanged — use it to trial a rule before enforcing it; `off` excludes this type from a group enabled by a broader key.
+   * What happens when this type is found, in BOTH directions. `mask` replaces the matched text with a placeholder and the conversation continues; `block` rejects the request or terminates the response with an error naming only the detected types (never the values); `log` records a finding and lets the traffic pass unchanged — use it to trial a rule before enforcing it; `off` excludes this type from a group enabled by a broader key. A rule states either `action` or the directional pair (`inboundAction`/`outboundAction`), never both.
+   */
+  action?: "mask" | "block" | "log" | "off";
+  /**
+   * What happens when this type is found in what callers send the model (system prompt, message text, and tool-call arguments). Use with `outboundAction` to give one type different behavior per direction — for example mask PII on the way in and block it on the way out. Omitting it (or `off`) leaves the inbound direction unscanned for this type. Cannot be combined with `action`.
    */
-  action: "mask" | "block" | "log" | "off";
+  inboundAction?: "mask" | "block" | "log" | "off";
   /**
-   * Where the rule applies. `inbound` scans what callers send the model (system prompt, message text, and tool-call arguments); `outbound` scans what the model sends back (buffered responses whole, streaming responses chunk by chunk). Defaults to `both`.
+   * What happens when this type is found in what the model sends back (buffered responses whole, streaming responses as they stream). Omitting it (or `off`) leaves the outbound direction unscanned for this type. Cannot be combined with `action`.
    */
-  direction?: "both" | "inbound" | "outbound";
+  outboundAction?: "mask" | "block" | "log" | "off";
   /**
    * How much evidence a match needs before this rule acts. `corroborated` additionally requires one of the type's context words near the match (types that define no context words behave as `standard`); `standard` uses the catalog as tuned — distinctive shapes act on their own while ambiguous shapes need nearby context; `aggressive` counts every pattern match and is false-positive-prone — pair it with the `log` action for audits. Overrides the policy-level `detection` for this rule.
    */
   detection?: "corroborated" | "standard" | "aggressive";
   /**
-   * Replacement text for this rule when `action` is `mask`, overriding the policy-level `mask`. The `{type}` token inserts the detected type id in UPPER_SNAKE form (for example `[CONTACT_EMAIL]`).
+   * Replacement text for this rule's masked matches. The `{type}` token inserts the detected type id in UPPER_SNAKE form, so the default turns a matched email into `[CONTACT_EMAIL]` — typed placeholders keep masked conversations legible to the model. Set a literal like `[REDACTED]` to hide the type.
    */
   mask?: string;
   partialMask?: DlpPartialMask;
 }
 
 /**
- * What to find and what to do about it. Each key is a built-in data type id (like `id-us-ssn`) or a group selector (like `pii` or `secret`, plus any dash-aligned id prefix such as `secret-aws`); each value is a rule object whose required `action` says what happens when that type is found. Types you do not mention are not scanned. The most specific key wins — an exact id beats a prefix beats a group — and the winning entry decides everything for its type, direction included. When one stretch of text matches multiple rules, the severest action wins (block > mask > log). At least one rule must scan something.
+ * What to find and what to do about it. Each key is a built-in data type id (like `id-us-ssn`) or a group selector (like `pii` or `secret`, plus any dash-aligned id prefix such as `secret-aws`); each value is a rule object stating either one `action` for both directions or a directional pair (`inboundAction`/`outboundAction`) — for example mask PII inbound and block it outbound. Types you do not mention are not scanned. The most specific key wins — an exact id beats a prefix beats a group — and the winning entry decides everything for its type. When one stretch of text matches multiple rules, the severest action wins (block > mask > log). At least one rule must scan something.
  * @public
  */
 declare interface DlpRules {
@@ -5235,7 +5229,7 @@ declare interface FallbackModels {
 }
 
 /**
- * How long a primary model may take before the failure fallback is attempted.
+ * How long to wait for primary-model response headers before attempting the failure fallback. The timeout does not bound a streaming response body after its headers arrive.
  * @public
  */
 declare type FallbackTimeoutSeconds = number;
@@ -5354,6 +5348,7 @@ declare interface FunctionTool {
  * Galileo Tracing Inbound Policy
  * @title Galileo Tracing
  * @product ai-gateway
+ * @hidden
  *
  * This policy automatically handles tracing for both streaming and non-streaming
  * responses from AI Gateway. It creates complete traces with workflow and LLM spans
@@ -5400,10 +5395,9 @@ export declare interface GalileoTracingPolicyOptions {
 }
 
 /**
- * Galileo Tracing Inbound Policy (AI Gateway v2)
- * @title Galileo Tracing (v2)
+ * Galileo Tracing Inbound Policy
+ * @title Galileo Tracing
  * @product ai-gateway
- * @hidden
  * @requiresAI
  *
  * Traces both streaming and non-streaming AI Gateway responses to Galileo's LLM
@@ -13577,6 +13571,7 @@ export declare interface SecretMaskingOutboundPolicyOptions {
  * @public
  * @enterprise
  * @requiresAI
+ * @deprecated Use {@link https://zuplo.com/docs/policies/ai-gateway-semantic-cache-v2-inbound|AI Gateway Semantic Cache} instead.
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
  * @param options - The policy options set in policies.json

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.2.0",
+  "version": "7.2.2",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/cli",
-  "version": "7.2.0",
+  "version": "7.2.2",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "type": "module",
@@ -28,10 +28,10 @@
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "@swc/core": "1.10.18",
-    "@zuplo/core": "7.2.0",
+    "@zuplo/core": "7.2.2",
     "@zuplo/editor": "1.0.31094607111",
-    "@zuplo/openapi-tools": "7.2.0",
-    "@zuplo/runtime": "7.2.0",
+    "@zuplo/openapi-tools": "7.2.2",
+    "@zuplo/runtime": "7.2.2",
     "chalk": "5.4.1",
     "chokidar": "3.5.3",
     "cookie": "1.0.2",
@@ -62,8 +62,8 @@
     "workerd": "1.20241230.0",
     "yargs": "17.7.2",
     "zod": "4.4.3",
-    "@zuplo/graphql": "7.2.0",
-    "@zuplo/otel": "7.2.0"
+    "@zuplo/graphql": "7.2.2",
+    "@zuplo/otel": "7.2.2"
   },
   "bundleDependencies": [
     "@inquirer/prompts",