@zuplo/runtime 6.70.26 → 6.70.28

package/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{b as d}from"../chunk-NW4YQXGC.js";import{_ as n,a as t}from"../chunk-JAEQKE5H.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function o(i){e.push(Promise.resolve(i))}return t(o,"waitUntil"),{context:new s({event:{waitUntil:o},route:u.route}),invokeResponse:t(async()=>{await Promise.all(e)},"invokeResponse")}}t(g,"createMockContext");var p={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:t(()=>({}),"raw")},s=class extends EventTarget{static{t(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:o=p,parentContext:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:t(()=>{},"setLogProperties")},this.custom={},this.route=o,this.incomingRequestProperties={asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0},this.parentContext=r,this.#e=e,this.analyticsContext=new d(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,o){throw new Error("Not implemented")}invokeOutboundPolicy(e,o,r){throw new Error("Not implemented")}invokeRoute(e,o){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,o,r){let l=t(i=>{try{typeof o=="function"?o(i):o.handleEvent(i)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,l,r)}};export{s as MockZuploContext,g as createMockContext};
+import{b as d}from"../chunk-F7DJMBWH.js";import{_ as n,a as t}from"../chunk-JAEQKE5H.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function o(i){e.push(Promise.resolve(i))}return t(o,"waitUntil"),{context:new s({event:{waitUntil:o},route:u.route}),invokeResponse:t(async()=>{await Promise.all(e)},"invokeResponse")}}t(g,"createMockContext");var p={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:t(()=>({}),"raw")},s=class extends EventTarget{static{t(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:o=p,parentContext:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:t(()=>{},"setLogProperties")},this.custom={},this.route=o,this.incomingRequestProperties={asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0},this.parentContext=r,this.#e=e,this.analyticsContext=new d(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,o){throw new Error("Not implemented")}invokeOutboundPolicy(e,o,r){throw new Error("Not implemented")}invokeRoute(e,o){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,o,r){let l=t(i=>{try{typeof o=="function"?o(i):o.handleEvent(i)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,l,r)}};export{s as MockZuploContext,g as createMockContext};
 //# sourceMappingURL=index.js.map

package/out/types/index.d.ts

@@ -2957,54 +2957,38 @@ export declare interface ErrorHandler {
 declare type EventsInterval = number;
 
 declare const EventType: {
-  readonly MCP_TOOL_USAGE: "mcp_tool_usage";
-  readonly MCP_RESOURCE_READ: "mcp_resource_read";
-  readonly MCP_PROMPT_GET: "mcp_prompt_get";
-  readonly MCP_SESSION_START: "mcp_session_start";
   readonly AI_GATEWAY_COST_SUM: "ai_gateway_cost_sum";
   readonly AI_GATEWAY_REQUEST_COUNT: "ai_gateway_request_count";
   readonly AI_GATEWAY_TOKEN_SUM: "ai_gateway_token_sum";
   readonly AI_GATEWAY_LATENCY_HISTOGRAM: "ai_gateway_latency_histogram";
   readonly AI_GATEWAY_WARNING_COUNT: "ai_gateway_warning_count";
   readonly AI_GATEWAY_BLOCKED_COUNT: "ai_gateway_blocked_count";
-  readonly MCP_GATEWAY_REQUEST_RECEIVED: "mcp_gateway_request_received";
-  readonly MCP_GATEWAY_REQUEST_COMPLETED: "mcp_gateway_request_completed";
-  readonly MCP_GATEWAY_REQUEST_REJECTED: "mcp_gateway_request_rejected";
-  readonly MCP_GATEWAY_INITIALIZE_NEGOTIATED: "mcp_gateway_initialize_negotiated";
-  readonly MCP_GATEWAY_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_gateway_client_unsupported_behavior";
-  readonly MCP_GATEWAY_CATALOG_LISTED: "mcp_gateway_catalog_listed";
-  readonly MCP_GATEWAY_CATALOG_IMPORTED: "mcp_gateway_catalog_imported";
-  readonly MCP_GATEWAY_CATALOG_DRIFT_DETECTED: "mcp_gateway_catalog_drift_detected";
-  readonly MCP_GATEWAY_CAPABILITY_LISTED: "mcp_gateway_capability_listed";
-  readonly MCP_GATEWAY_CAPABILITY_INVOKED: "mcp_gateway_capability_invoked";
-  readonly MCP_GATEWAY_CAPABILITY_COMPLETED: "mcp_gateway_capability_completed";
-  readonly MCP_GATEWAY_CAPABILITY_FAILED: "mcp_gateway_capability_failed";
-  readonly MCP_GATEWAY_CAPABILITY_CONNECT_REQUIRED: "mcp_gateway_capability_connect_required";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_gateway_auth_downstream_token_validated";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_gateway_auth_downstream_token_rejected";
-  readonly MCP_GATEWAY_OAUTH_CLIENT_REGISTERED: "mcp_gateway_oauth_client_registered";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_STARTED: "mcp_gateway_oauth_authorize_started";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_gateway_oauth_authorize_awaiting_setup";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_ISSUED: "mcp_gateway_oauth_token_issued";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_gateway_oauth_token_refresh_rotated";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REVOKED: "mcp_gateway_oauth_token_revoked";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_gateway_auth_upstream_connect_required";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_gateway_auth_upstream_connect_started";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_gateway_auth_upstream_callback_received";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_gateway_auth_upstream_token_exchange_succeeded";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_gateway_auth_upstream_token_exchange_failed";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_gateway_auth_upstream_credential_resolved";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_gateway_auth_upstream_credential_missing";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_gateway_auth_upstream_reconsent_required";
-  readonly MCP_GATEWAY_POLICY_DECISION: "mcp_gateway_policy_decision";
-  readonly MCP_GATEWAY_GUARDRAIL_DECISION: "mcp_gateway_guardrail_decision";
-  readonly MCP_GATEWAY_RATE_LIMIT_DECISION: "mcp_gateway_rate_limit_decision";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_SENT: "mcp_gateway_upstream_request_sent";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_COMPLETED: "mcp_gateway_upstream_request_completed";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_FAILED: "mcp_gateway_upstream_request_failed";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_CREATED: "mcp_gateway_audit_virtual_server_created";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_UPDATED: "mcp_gateway_audit_virtual_server_updated";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_DELETED: "mcp_gateway_audit_virtual_server_deleted";
+  readonly MCP_REQUEST_RECEIVED: "mcp_request_received";
+  readonly MCP_REQUEST_COMPLETED: "mcp_request_completed";
+  readonly MCP_REQUEST_REJECTED: "mcp_request_rejected";
+  readonly MCP_INITIALIZE_NEGOTIATED: "mcp_initialize_negotiated";
+  readonly MCP_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_client_unsupported_behavior";
+  readonly MCP_CAPABILITY_LISTED: "mcp_capability_listed";
+  readonly MCP_CAPABILITY_INVOKED: "mcp_capability_invoked";
+  readonly MCP_CAPABILITY_COMPLETED: "mcp_capability_completed";
+  readonly MCP_CAPABILITY_FAILED: "mcp_capability_failed";
+  readonly MCP_CAPABILITY_CONNECT_REQUIRED: "mcp_capability_connect_required";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_auth_downstream_token_validated";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_auth_downstream_token_rejected";
+  readonly MCP_OAUTH_CLIENT_REGISTERED: "mcp_oauth_client_registered";
+  readonly MCP_OAUTH_AUTHORIZE_STARTED: "mcp_oauth_authorize_started";
+  readonly MCP_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_oauth_authorize_awaiting_setup";
+  readonly MCP_OAUTH_TOKEN_ISSUED: "mcp_oauth_token_issued";
+  readonly MCP_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_oauth_token_refresh_rotated";
+  readonly MCP_OAUTH_TOKEN_REVOKED: "mcp_oauth_token_revoked";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_auth_upstream_connect_required";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_auth_upstream_connect_started";
+  readonly MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_auth_upstream_callback_received";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_auth_upstream_token_exchange_succeeded";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_auth_upstream_token_exchange_failed";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_auth_upstream_credential_resolved";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_auth_upstream_credential_missing";
+  readonly MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_auth_upstream_reconsent_required";
 };
 
 declare type EventType = (typeof EventType)[keyof typeof EventType];
@@ -8973,6 +8957,42 @@ export declare interface SetStatusOutboundPolicyOptions {
   statusText?: string;
 }
 
+/**
+ * Sets a single header on the incoming request, typically used to attach an
+ * API key for the upstream service. A more directed version of the
+ * `SetHeadersInboundPolicy` that defaults the header name to `Authorization`
+ * and is intended to be used with an `$env()` reference for the value.
+ *
+ * @title Set Upstream API Key
+ * @product api-gateway
+ * @public
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
+ */
+export declare const SetUpstreamApiKeyInboundPolicy: InboundPolicyHandler<SetUpstreamApiKeyInboundPolicyOptions>;
+
+/**
+ * The options for this policy.
+ * @public
+ */
+export declare interface SetUpstreamApiKeyInboundPolicyOptions {
+  /**
+   * The name of the header to set on the request. Defaults to `Authorization`.
+   */
+  header?: string;
+  /**
+   * The value of the header. Most commonly an environment variable reference such as `Bearer $env(UPSTREAM_API_KEY)` so the secret is sourced from your environment.
+   */
+  value: string;
+  /**
+   * Overwrite the value if the header is already present in the request.
+   */
+  overwrite?: boolean;
+}
+
 /**
  * Function type for determining if a request should be logged
  * @public

package/out/types/mcp-gateway/index.d.ts

@@ -87,54 +87,38 @@ declare interface CorsPolicyConfiguration {
 declare type DevPortalType = "legacy" | "zudoku";
 
 declare const EventType: {
-  readonly MCP_TOOL_USAGE: "mcp_tool_usage";
-  readonly MCP_RESOURCE_READ: "mcp_resource_read";
-  readonly MCP_PROMPT_GET: "mcp_prompt_get";
-  readonly MCP_SESSION_START: "mcp_session_start";
   readonly AI_GATEWAY_COST_SUM: "ai_gateway_cost_sum";
   readonly AI_GATEWAY_REQUEST_COUNT: "ai_gateway_request_count";
   readonly AI_GATEWAY_TOKEN_SUM: "ai_gateway_token_sum";
   readonly AI_GATEWAY_LATENCY_HISTOGRAM: "ai_gateway_latency_histogram";
   readonly AI_GATEWAY_WARNING_COUNT: "ai_gateway_warning_count";
   readonly AI_GATEWAY_BLOCKED_COUNT: "ai_gateway_blocked_count";
-  readonly MCP_GATEWAY_REQUEST_RECEIVED: "mcp_gateway_request_received";
-  readonly MCP_GATEWAY_REQUEST_COMPLETED: "mcp_gateway_request_completed";
-  readonly MCP_GATEWAY_REQUEST_REJECTED: "mcp_gateway_request_rejected";
-  readonly MCP_GATEWAY_INITIALIZE_NEGOTIATED: "mcp_gateway_initialize_negotiated";
-  readonly MCP_GATEWAY_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_gateway_client_unsupported_behavior";
-  readonly MCP_GATEWAY_CATALOG_LISTED: "mcp_gateway_catalog_listed";
-  readonly MCP_GATEWAY_CATALOG_IMPORTED: "mcp_gateway_catalog_imported";
-  readonly MCP_GATEWAY_CATALOG_DRIFT_DETECTED: "mcp_gateway_catalog_drift_detected";
-  readonly MCP_GATEWAY_CAPABILITY_LISTED: "mcp_gateway_capability_listed";
-  readonly MCP_GATEWAY_CAPABILITY_INVOKED: "mcp_gateway_capability_invoked";
-  readonly MCP_GATEWAY_CAPABILITY_COMPLETED: "mcp_gateway_capability_completed";
-  readonly MCP_GATEWAY_CAPABILITY_FAILED: "mcp_gateway_capability_failed";
-  readonly MCP_GATEWAY_CAPABILITY_CONNECT_REQUIRED: "mcp_gateway_capability_connect_required";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_gateway_auth_downstream_token_validated";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_gateway_auth_downstream_token_rejected";
-  readonly MCP_GATEWAY_OAUTH_CLIENT_REGISTERED: "mcp_gateway_oauth_client_registered";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_STARTED: "mcp_gateway_oauth_authorize_started";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_gateway_oauth_authorize_awaiting_setup";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_ISSUED: "mcp_gateway_oauth_token_issued";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_gateway_oauth_token_refresh_rotated";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REVOKED: "mcp_gateway_oauth_token_revoked";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_gateway_auth_upstream_connect_required";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_gateway_auth_upstream_connect_started";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_gateway_auth_upstream_callback_received";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_gateway_auth_upstream_token_exchange_succeeded";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_gateway_auth_upstream_token_exchange_failed";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_gateway_auth_upstream_credential_resolved";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_gateway_auth_upstream_credential_missing";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_gateway_auth_upstream_reconsent_required";
-  readonly MCP_GATEWAY_POLICY_DECISION: "mcp_gateway_policy_decision";
-  readonly MCP_GATEWAY_GUARDRAIL_DECISION: "mcp_gateway_guardrail_decision";
-  readonly MCP_GATEWAY_RATE_LIMIT_DECISION: "mcp_gateway_rate_limit_decision";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_SENT: "mcp_gateway_upstream_request_sent";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_COMPLETED: "mcp_gateway_upstream_request_completed";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_FAILED: "mcp_gateway_upstream_request_failed";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_CREATED: "mcp_gateway_audit_virtual_server_created";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_UPDATED: "mcp_gateway_audit_virtual_server_updated";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_DELETED: "mcp_gateway_audit_virtual_server_deleted";
+  readonly MCP_REQUEST_RECEIVED: "mcp_request_received";
+  readonly MCP_REQUEST_COMPLETED: "mcp_request_completed";
+  readonly MCP_REQUEST_REJECTED: "mcp_request_rejected";
+  readonly MCP_INITIALIZE_NEGOTIATED: "mcp_initialize_negotiated";
+  readonly MCP_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_client_unsupported_behavior";
+  readonly MCP_CAPABILITY_LISTED: "mcp_capability_listed";
+  readonly MCP_CAPABILITY_INVOKED: "mcp_capability_invoked";
+  readonly MCP_CAPABILITY_COMPLETED: "mcp_capability_completed";
+  readonly MCP_CAPABILITY_FAILED: "mcp_capability_failed";
+  readonly MCP_CAPABILITY_CONNECT_REQUIRED: "mcp_capability_connect_required";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_auth_downstream_token_validated";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_auth_downstream_token_rejected";
+  readonly MCP_OAUTH_CLIENT_REGISTERED: "mcp_oauth_client_registered";
+  readonly MCP_OAUTH_AUTHORIZE_STARTED: "mcp_oauth_authorize_started";
+  readonly MCP_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_oauth_authorize_awaiting_setup";
+  readonly MCP_OAUTH_TOKEN_ISSUED: "mcp_oauth_token_issued";
+  readonly MCP_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_oauth_token_refresh_rotated";
+  readonly MCP_OAUTH_TOKEN_REVOKED: "mcp_oauth_token_revoked";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_auth_upstream_connect_required";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_auth_upstream_connect_started";
+  readonly MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_auth_upstream_callback_received";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_auth_upstream_token_exchange_succeeded";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_auth_upstream_token_exchange_failed";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_auth_upstream_credential_resolved";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_auth_upstream_credential_missing";
+  readonly MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_auth_upstream_reconsent_required";
 };
 
 declare type EventType = (typeof EventType)[keyof typeof EventType];
@@ -989,7 +973,7 @@ export declare interface McpAuth0OAuthInboundPolicyOptions {
   /**
    * The Auth0 client_secret. Use $env(...) to source from a secret environment variable.
    */
-  clientSecret?: string;
+  clientSecret: string;
   /**
    * OIDC scopes requested during browser login.
    */
@@ -1092,9 +1076,9 @@ export declare interface McpOAuthInboundPolicyOptions {
      */
     jwksUrl: string;
     /**
-     * Expected audience claim on tokens issued for the gateway.
+     * Optional IdP audience value. Leave unset when browser login ID tokens use the OIDC client_id as their audience.
      */
-    audience: string;
+    audience?: string;
   };
   /**
    * Browser-side OAuth/OIDC settings used when the gateway redirects the user to the identity provider for login.
@@ -1113,7 +1097,7 @@ export declare interface McpOAuthInboundPolicyOptions {
      */
     clientId?: string;
     /**
-     * The OIDC client_secret. Use $env(...) to source from a secret environment variable.
+     * The OIDC client_secret. Required for federated browser login. Use $env(...) to source from a secret environment variable.
      */
     clientSecret?: string;
     /**
@@ -1213,12 +1197,12 @@ export declare interface McpUpstreamConnectionInboundPolicyOptions {
     required?: boolean;
   }[];
   /**
-   * Authentication mode. `user_oauth` performs per-user OAuth federation; `shared-oauth` uses a gateway-wide OAuth grant; `static_secret` / `user-secret` / `shared-secret` use a configured secret instead of OAuth.
+   * Authentication mode. `user-oauth` performs per-user OAuth federation; `shared-oauth` uses a gateway-wide OAuth grant; `static-secret` / `user-secret` / `shared-secret` use a configured secret instead of OAuth.
    */
   authMode:
-    | "user_oauth"
+    | "user-oauth"
     | "shared-oauth"
-    | "static_secret"
+    | "static-secret"
     | "user-secret"
     | "shared-secret";
   /**
@@ -1264,7 +1248,7 @@ export declare interface McpUpstreamConnectionInboundPolicyOptions {
           | "none";
       };
   /**
-   * Static secret configuration (for `static_secret`, `user-secret`, and `shared-secret` auth modes).
+   * Static secret configuration (for `static-secret`, `user-secret`, and `shared-secret` auth modes).
    */
   secret?: {
     [k: string]: unknown;

package/out/types/mocks/index.d.ts

@@ -78,54 +78,38 @@ export declare function createMockContext(options?: {
 };
 
 declare const EventType: {
-  readonly MCP_TOOL_USAGE: "mcp_tool_usage";
-  readonly MCP_RESOURCE_READ: "mcp_resource_read";
-  readonly MCP_PROMPT_GET: "mcp_prompt_get";
-  readonly MCP_SESSION_START: "mcp_session_start";
   readonly AI_GATEWAY_COST_SUM: "ai_gateway_cost_sum";
   readonly AI_GATEWAY_REQUEST_COUNT: "ai_gateway_request_count";
   readonly AI_GATEWAY_TOKEN_SUM: "ai_gateway_token_sum";
   readonly AI_GATEWAY_LATENCY_HISTOGRAM: "ai_gateway_latency_histogram";
   readonly AI_GATEWAY_WARNING_COUNT: "ai_gateway_warning_count";
   readonly AI_GATEWAY_BLOCKED_COUNT: "ai_gateway_blocked_count";
-  readonly MCP_GATEWAY_REQUEST_RECEIVED: "mcp_gateway_request_received";
-  readonly MCP_GATEWAY_REQUEST_COMPLETED: "mcp_gateway_request_completed";
-  readonly MCP_GATEWAY_REQUEST_REJECTED: "mcp_gateway_request_rejected";
-  readonly MCP_GATEWAY_INITIALIZE_NEGOTIATED: "mcp_gateway_initialize_negotiated";
-  readonly MCP_GATEWAY_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_gateway_client_unsupported_behavior";
-  readonly MCP_GATEWAY_CATALOG_LISTED: "mcp_gateway_catalog_listed";
-  readonly MCP_GATEWAY_CATALOG_IMPORTED: "mcp_gateway_catalog_imported";
-  readonly MCP_GATEWAY_CATALOG_DRIFT_DETECTED: "mcp_gateway_catalog_drift_detected";
-  readonly MCP_GATEWAY_CAPABILITY_LISTED: "mcp_gateway_capability_listed";
-  readonly MCP_GATEWAY_CAPABILITY_INVOKED: "mcp_gateway_capability_invoked";
-  readonly MCP_GATEWAY_CAPABILITY_COMPLETED: "mcp_gateway_capability_completed";
-  readonly MCP_GATEWAY_CAPABILITY_FAILED: "mcp_gateway_capability_failed";
-  readonly MCP_GATEWAY_CAPABILITY_CONNECT_REQUIRED: "mcp_gateway_capability_connect_required";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_gateway_auth_downstream_token_validated";
-  readonly MCP_GATEWAY_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_gateway_auth_downstream_token_rejected";
-  readonly MCP_GATEWAY_OAUTH_CLIENT_REGISTERED: "mcp_gateway_oauth_client_registered";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_STARTED: "mcp_gateway_oauth_authorize_started";
-  readonly MCP_GATEWAY_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_gateway_oauth_authorize_awaiting_setup";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_ISSUED: "mcp_gateway_oauth_token_issued";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_gateway_oauth_token_refresh_rotated";
-  readonly MCP_GATEWAY_OAUTH_TOKEN_REVOKED: "mcp_gateway_oauth_token_revoked";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_gateway_auth_upstream_connect_required";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_gateway_auth_upstream_connect_started";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_gateway_auth_upstream_callback_received";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_gateway_auth_upstream_token_exchange_succeeded";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_gateway_auth_upstream_token_exchange_failed";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_gateway_auth_upstream_credential_resolved";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_gateway_auth_upstream_credential_missing";
-  readonly MCP_GATEWAY_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_gateway_auth_upstream_reconsent_required";
-  readonly MCP_GATEWAY_POLICY_DECISION: "mcp_gateway_policy_decision";
-  readonly MCP_GATEWAY_GUARDRAIL_DECISION: "mcp_gateway_guardrail_decision";
-  readonly MCP_GATEWAY_RATE_LIMIT_DECISION: "mcp_gateway_rate_limit_decision";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_SENT: "mcp_gateway_upstream_request_sent";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_COMPLETED: "mcp_gateway_upstream_request_completed";
-  readonly MCP_GATEWAY_UPSTREAM_REQUEST_FAILED: "mcp_gateway_upstream_request_failed";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_CREATED: "mcp_gateway_audit_virtual_server_created";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_UPDATED: "mcp_gateway_audit_virtual_server_updated";
-  readonly MCP_GATEWAY_AUDIT_VIRTUAL_SERVER_DELETED: "mcp_gateway_audit_virtual_server_deleted";
+  readonly MCP_REQUEST_RECEIVED: "mcp_request_received";
+  readonly MCP_REQUEST_COMPLETED: "mcp_request_completed";
+  readonly MCP_REQUEST_REJECTED: "mcp_request_rejected";
+  readonly MCP_INITIALIZE_NEGOTIATED: "mcp_initialize_negotiated";
+  readonly MCP_CLIENT_UNSUPPORTED_BEHAVIOR: "mcp_client_unsupported_behavior";
+  readonly MCP_CAPABILITY_LISTED: "mcp_capability_listed";
+  readonly MCP_CAPABILITY_INVOKED: "mcp_capability_invoked";
+  readonly MCP_CAPABILITY_COMPLETED: "mcp_capability_completed";
+  readonly MCP_CAPABILITY_FAILED: "mcp_capability_failed";
+  readonly MCP_CAPABILITY_CONNECT_REQUIRED: "mcp_capability_connect_required";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_VALIDATED: "mcp_auth_downstream_token_validated";
+  readonly MCP_AUTH_DOWNSTREAM_TOKEN_REJECTED: "mcp_auth_downstream_token_rejected";
+  readonly MCP_OAUTH_CLIENT_REGISTERED: "mcp_oauth_client_registered";
+  readonly MCP_OAUTH_AUTHORIZE_STARTED: "mcp_oauth_authorize_started";
+  readonly MCP_OAUTH_AUTHORIZE_AWAITING_SETUP: "mcp_oauth_authorize_awaiting_setup";
+  readonly MCP_OAUTH_TOKEN_ISSUED: "mcp_oauth_token_issued";
+  readonly MCP_OAUTH_TOKEN_REFRESH_ROTATED: "mcp_oauth_token_refresh_rotated";
+  readonly MCP_OAUTH_TOKEN_REVOKED: "mcp_oauth_token_revoked";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_REQUIRED: "mcp_auth_upstream_connect_required";
+  readonly MCP_AUTH_UPSTREAM_CONNECT_STARTED: "mcp_auth_upstream_connect_started";
+  readonly MCP_AUTH_UPSTREAM_CALLBACK_RECEIVED: "mcp_auth_upstream_callback_received";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_SUCCEEDED: "mcp_auth_upstream_token_exchange_succeeded";
+  readonly MCP_AUTH_UPSTREAM_TOKEN_EXCHANGE_FAILED: "mcp_auth_upstream_token_exchange_failed";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_RESOLVED: "mcp_auth_upstream_credential_resolved";
+  readonly MCP_AUTH_UPSTREAM_CREDENTIAL_MISSING: "mcp_auth_upstream_credential_missing";
+  readonly MCP_AUTH_UPSTREAM_RECONSENT_REQUIRED: "mcp_auth_upstream_reconsent_required";
 };
 
 declare type EventType = (typeof EventType)[keyof typeof EventType];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.70.26",
+  "version": "6.70.28",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {