@zuplo/runtime 6.70.56 → 6.70.59

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -7115,8 +7115,10 @@ export declare interface MTLSAuthMetadata {
7115
7115
  notAfter: string;
7116
7116
  /**
7117
7117
  * Certificate SHA-256 fingerprint formatted as uppercase colon-separated hex.
7118
+ * Omitted when the upstream proxy did not provide the fingerprint and the
7119
+ * full certificate body is unavailable.
7118
7120
  */
7119
- sha256Fingerprint: string;
7121
+ sha256Fingerprint?: string;
7120
7122
  }
7121
7123
 
7122
7124
  declare interface MultiRequests {
@@ -1382,6 +1382,8 @@ export declare interface McpEntraOAuthInboundPolicyOptions {
1382
1382
  * ```
1383
1383
  */
1384
1384
  export declare class McpGatewayPlugin extends SystemRuntimePlugin {
1385
+ #private;
1386
+ constructor(options?: McpGatewayPluginOptions);
1385
1387
  registerRoutes(options: {
1386
1388
  router: Router;
1387
1389
  runtimeSettings: RuntimeSettings;
@@ -1389,6 +1391,32 @@ export declare class McpGatewayPlugin extends SystemRuntimePlugin {
1389
1391
  }): void;
1390
1392
  }
1391
1393
 
1394
+ /**
1395
+ * Options for the {@link McpGatewayPlugin}.
1396
+ *
1397
+ * @beta
1398
+ */
1399
+ export declare interface McpGatewayPluginOptions {
1400
+ /**
1401
+ * Base path under which the gateway mounts its internal OAuth and
1402
+ * upstream-connection action routes (e.g. `/oauth/token`,
1403
+ * `/auth/connections/{id}/connect`). Namespacing these routes keeps them out
1404
+ * of your API's route namespace so a route such as `/oauth/token` in
1405
+ * `routes.oas.json` does not collide with the gateway's own endpoints.
1406
+ *
1407
+ * The OAuth discovery documents
1408
+ * (`/.well-known/oauth-authorization-server` and
1409
+ * `/.well-known/oauth-protected-resource/...`) always remain at the origin
1410
+ * root, because RFC 8414 / RFC 9728 locate them relative to the gateway
1411
+ * issuer; only the action routes move under `basePath`.
1412
+ *
1413
+ * Pass `"/"` to mount the action routes at the origin root.
1414
+ *
1415
+ * @default "/__zuplo"
1416
+ */
1417
+ basePath?: string;
1418
+ }
1419
+
1392
1420
  /**
1393
1421
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
1394
1422
  * with browser login delegated to Google.
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@zuplo/runtime",
3
3
  "type": "module",
4
- "version": "6.70.56",
4
+ "version": "6.70.59",
5
5
  "repository": "https://github.com/zuplo/zuplo",
6
6
  "author": "Zuplo, Inc.",
7
7
  "exports": {