@zuplo/runtime 6.73.30 → 6.74.2

package/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{b as l}from"../chunk-SH74D236.js";import{Z as n}from"../chunk-YIT72S45.js";import{a as o}from"../chunk-TYV53J3B.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function t(i){e.push(Promise.resolve(i))}return o(t,"waitUntil"),{context:new s({event:{waitUntil:t},route:u.route}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(g,"createMockContext");var p={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},s=class extends EventTarget{static{o(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=p,parentContext:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=r,this.#e=e,this.analyticsContext=new l(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,r){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,t,r){let d=o(i=>{try{typeof t=="function"?t(i):t.handleEvent(i)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,d,r)}};export{s as MockZuploContext,g as createMockContext};
+import{b as l}from"../chunk-5BL2UFIS.js";import{_ as n}from"../chunk-N22BFR2U.js";import{a as o}from"../chunk-TYV53J3B.js";function g(u={request:new Request("https://api.example.com")}){let e=[];function t(r){e.push(Promise.resolve(r))}return o(t,"waitUntil"),{context:new s({event:{waitUntil:t},route:u.route}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(g,"createMockContext");var a={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},s=class extends EventTarget{static{o(this,"MockZuploContext")}#e;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=a,parentContext:i}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:n.console.info,log:n.console.log,debug:n.console.debug,warn:n.console.warn,error:n.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=i,this.#e=e,this.analyticsContext=new l(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,i){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addEventListener(e,t,i){let d=o(r=>{try{typeof t=="function"?t(r):t.handleEvent(r)}catch(p){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),p}},"wrapped");super.addEventListener(e,d,i)}};export{s as MockZuploContext,g as createMockContext};
 //# sourceMappingURL=index.js.map

package/out/esm/mocks/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["@zuplo/runtime/mocks/context.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;2HA4BO,SAASA,EACdC,EAA6D,CAC3D,QAAS,IAAI,QAAQ,yBAAyB,CAChD,EACA,CACA,IAAMC,EAAwC,CAAC,EAG/C,SAASC,EAAUC,EAA6B,CAC9CF,EAAkB,KAAK,QAAQ,QAAQE,CAAO,CAAC,CACjD,CAFS,OAAAC,EAAAF,EAAA,aAaF,CAAE,QATO,IAAIG,EAAiB,CACnC,MAAO,CAAE,UAAAH,CAAU,EACnB,MAAOF,EAAQ,KACjB,CAAC,EAMiB,eAJKI,EAAA,SAAY,CACjC,MAAM,QAAQ,IAAIH,CAAiB,CACrC,EAFuB,iBAIU,CACnC,CAtBgBG,EAAAL,EAAA,qBAwBhB,IAAMO,EAA2C,CAC/C,KAAM,IACN,QAAS,CAAC,KAAK,EACf,QAAS,CACP,OAAQ,CAAC,EACT,OAAQ,SACV,EACA,IAAKF,EAAA,KAAU,CAAC,GAAX,MACP,EAMaC,EAAN,cAA+B,WAAoC,CAlE1E,MAkE0E,CAAAD,EAAA,yBAC/DG,GACA,UACA,UACA,IACA,MAEA,OACA,0BACA,cACA,iBAET,YAAY,CACV,MAAAC,EACA,MAAAC,EAAQH,EACR,cAAAI,CACF,EAIG,CACD,MAAM,EACN,KAAK,UAAY,OAAO,WAAW,EACnC,KAAK,UAAY,OAAO,WAAW,EAEnC,KAAK,IAAM,CACT,KAAMC,EAAU,QAAQ,KACxB,IAAKA,EAAU,QAAQ,IACvB,MAAOA,EAAU,QAAQ,MACzB,KAAMA,EAAU,QAAQ,KACxB,MAAOA,EAAU,QAAQ,MACzB,iBAAkBP,EAAA,IAAM,CAAC,EAAP,mBACpB,EACA,KAAK,OAAS,CAAC,EACf,KAAK,MAAQK,EACb,KAAK,0BAA4B,CAC/B,IAAK,KACL,eAAgB,eAChB,KAAM,UACN,OAAQ,aACR,WAAY,KACZ,KAAM,MACN,UAAW,KACX,QAAS,KACT,WAAY,QACZ,UAAW,MACX,SAAU,OACV,UAAW,OACX,SAAU,OACV,aAAc,OACd,WAAY,OACZ,6BAA8B,OAC9B,6BAA8B,OAC9B,4BAA6B,OAC7B,oBAAqB,OACrB,mBAAoB,OACpB,mBAAoB,OACpB,oBAAqB,MACvB,EACA,KAAK,cAAgBC,EACrB,KAAKH,GAASC,EACd,KAAK,iBAAmB,IAAII,EAA6B,KAAK,SAAS,CACzE,CAGA,UAAUT,EAAuB,CAC/B,KAAKI,GAAO,UAAUJ,CAAO,CAC/B,CAEA,oBACEU,EACAC,EACkC,CAClC,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAEA,qBACED,EACAE,EACAD,EACmB,CACnB,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAEA,YACEE,EACAC,EACmB,CACnB,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAKA,uBAAuBC,EAAmC,CACxD,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAKA,4BAA4BA,EAAwC,CAClE,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAES,iBACPC,EACAC,EACApB,EACM,CACN,IAAMqB,EAA8CjB,EAACkB,GAAM,CACzD,GAAI,CACF,OAAOF,GAAY,WAAaA,EAAQE,CAAC,EAAIF,EAAQ,YAAYE,CAAC,CACpE,OAASC,EAAK,CACZ,WAAK,IAAI,MACP,wBAAwBJ,CAAI,mCAC9B,EACMI,CACR,CACF,EAToD,WAUpD,MAAM,iBAAiBJ,EAAME,EAASrB,CAAO,CAC/C,CACF","names":["createMockContext","options","waitUntilPromises","waitUntil","promise","__name","MockZuploContext","DEFAULT_ROUTE_CONFIG","#event","event","route","parentContext","internals_default","ZuploGatewayAnalyticsContext","policyName","request","response","input","init","hook","type","handler","wrapped","e","err"]}
+{"version":3,"sources":["@zuplo/runtime/mocks/context.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;2HA4BO,SAASA,EACdC,EAA6D,CAC3D,QAAS,IAAI,QAAQ,yBAAyB,CAChD,EACA,CACA,IAAMC,EAAwC,CAAC,EAG/C,SAASC,EAAUC,EAA6B,CAC9CF,EAAkB,KAAK,QAAQ,QAAQE,CAAO,CAAC,CACjD,CAFS,OAAAC,EAAAF,EAAA,aAaF,CAAE,QATO,IAAIG,EAAiB,CACnC,MAAO,CAAE,UAAAH,CAAU,EACnB,MAAOF,EAAQ,KACjB,CAAC,EAMiB,eAJKI,EAAA,SAAY,CACjC,MAAM,QAAQ,IAAIH,CAAiB,CACrC,EAFuB,iBAIU,CACnC,CAtBgBG,EAAAL,EAAA,qBAwBhB,IAAMO,EAA2C,CAC/C,KAAM,IACN,QAAS,CAAC,KAAK,EACf,QAAS,CACP,OAAQ,CAAC,EACT,OAAQ,SACV,EACA,IAAKF,EAAA,KAAU,CAAC,GAAX,MACP,EAMaC,EAAN,cAA+B,WAAoC,CAlE1E,MAkE0E,CAAAD,EAAA,yBAC/DG,GACA,UACA,UACA,IACA,MAEA,OACA,0BACA,cACA,iBAET,YAAY,CACV,MAAAC,EACA,MAAAC,EAAQH,EACR,cAAAI,CACF,EAIG,CACD,MAAM,EACN,KAAK,UAAY,OAAO,WAAW,EACnC,KAAK,UAAY,OAAO,WAAW,EAEnC,KAAK,IAAM,CACT,KAAMC,EAAU,QAAQ,KACxB,IAAKA,EAAU,QAAQ,IACvB,MAAOA,EAAU,QAAQ,MACzB,KAAMA,EAAU,QAAQ,KACxB,MAAOA,EAAU,QAAQ,MACzB,iBAAkBP,EAAA,IAAM,CAAC,EAAP,mBACpB,EACA,KAAK,OAAS,CAAC,EACf,KAAK,MAAQK,EACb,KAAK,0BAA4B,CAC/B,GAAI,cACJ,IAAK,KACL,eAAgB,eAChB,KAAM,UACN,OAAQ,aACR,WAAY,KACZ,KAAM,MACN,UAAW,KACX,QAAS,KACT,WAAY,QACZ,UAAW,MACX,SAAU,OACV,UAAW,OACX,SAAU,OACV,aAAc,OACd,WAAY,OACZ,6BAA8B,OAC9B,6BAA8B,OAC9B,4BAA6B,OAC7B,oBAAqB,OACrB,mBAAoB,OACpB,mBAAoB,OACpB,oBAAqB,MACvB,EACA,KAAK,cAAgBC,EACrB,KAAKH,GAASC,EACd,KAAK,iBAAmB,IAAII,EAA6B,KAAK,SAAS,CACzE,CAGA,UAAUT,EAAuB,CAC/B,KAAKI,GAAO,UAAUJ,CAAO,CAC/B,CAEA,oBACEU,EACAC,EACkC,CAClC,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAEA,qBACED,EACAE,EACAD,EACmB,CACnB,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAEA,YACEE,EACAC,EACmB,CACnB,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAKA,uBAAuBC,EAAmC,CACxD,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAKA,4BAA4BA,EAAwC,CAClE,MAAM,IAAI,MAAM,iBAAiB,CACnC,CAES,iBACPC,EACAC,EACApB,EACM,CACN,IAAMqB,EAA8CjB,EAACkB,GAAM,CACzD,GAAI,CACF,OAAOF,GAAY,WAAaA,EAAQE,CAAC,EAAIF,EAAQ,YAAYE,CAAC,CACpE,OAASC,EAAK,CACZ,WAAK,IAAI,MACP,wBAAwBJ,CAAI,mCAC9B,EACMI,CACR,CACF,EAToD,WAUpD,MAAM,iBAAiBJ,EAAME,EAASrB,CAAO,CAC/C,CACF","names":["createMockContext","options","waitUntilPromises","waitUntil","promise","__name","MockZuploContext","DEFAULT_ROUTE_CONFIG","#event","event","route","parentContext","internals_default","ZuploGatewayAnalyticsContext","policyName","request","response","input","init","hook","type","handler","wrapped","e","err"]}

package/out/esm/sdks/aws/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{h as a,i as l,j as c,k as o,n as p,o as y,p as m}from"../../chunk-QVZD2XRK.js";import"../../chunk-UKQQD2JN.js";import"../../chunk-YIT72S45.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
+import{I as a,J as l,K as c,L as o,O as p,P as y,Q as m}from"../../chunk-SH5GYJN3.js";import"../../chunk-UKQQD2JN.js";import"../../chunk-N22BFR2U.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
 //# sourceMappingURL=index.js.map

package/out/types/index.d.ts

@@ -1,6 +1,6 @@
 import { Attributes } from "@opentelemetry/api";
-import type { CallToolRequest } from "@modelcontextprotocol/sdk/types.js";
-import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { CallToolRequest } from "@modelcontextprotocol/server";
+import type { CallToolResult } from "@modelcontextprotocol/server";
 import { InboundPolicyHandler as InboundPolicyHandler_2 } from "../../policies.js";
 import { KeyLike } from "jose";
 import { RequestGeneric as RequestGeneric_2 } from "../../request.js";
@@ -2670,6 +2670,8 @@ export declare interface AzureEventHubsRequestLoggerPluginOptions<T> {
   batchPeriodSeconds: number;
 }
 
+/* Excluded from this release type: BackgroundDispatchDebugLog */
+
 /**
  * Utility for batching and dispatching events in the background.
  * Useful for aggregating logs, metrics, or other data before sending to external services.
@@ -2729,6 +2731,22 @@ export declare class BackgroundDispatcher<TPayload> {
   enqueue: (payload: TPayload) => void;
 }
 
+/**
+ * A background dispatch failure with an optional diagnostic that is
+ * safe to write at debug level.
+ *
+ * @public
+ */
+export declare class BackgroundDispatchError extends Error {
+  readonly debugLog: BackgroundDispatchDebugLog | undefined;
+  constructor(
+    message: string,
+    options?: ErrorOptions & {
+      debugLog?: BackgroundDispatchDebugLog;
+    }
+  );
+}
+
 /**
  * A utility for loading and caching data in the background with automatic refresh
  * @public
@@ -7016,6 +7034,36 @@ declare interface IncludeMetrics {
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/out/types/internal/index.d.ts

@@ -588,6 +588,36 @@ declare type HttpStatusCodeRangeDefinition =
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/out/types/mcp/messages/index.d.ts

@@ -578,6 +578,36 @@ declare interface InboundPolicyHandler<TOptions = any> {
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/out/types/mcp-gateway/index.d.ts

@@ -706,6 +706,36 @@ declare abstract class InboundPolicy<
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/out/types/mocks/index.d.ts

@@ -485,6 +485,36 @@ declare type HttpStatusCodeRangeDefinition =
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/out/types/sdks/aws/index.d.ts

@@ -862,6 +862,36 @@ declare type HttpStatusCodeRangeDefinition =
  * @public
  */
 declare interface IncomingRequestProperties {
+  /**
+   * The IP address of the client that made the incoming request, for example,
+   * "203.0.113.7".
+   *
+   * Use this rather than reading an IP header off `request` yourself. Which
+   * header carries the address differs by deployment, and some are removed
+   * from the request before your code runs, so reading one directly is either
+   * empty or wrong depending on where the gateway is running.
+   *
+   * The value is `undefined` when the caller could not be identified, so
+   * handle that case rather than substituting a placeholder, which would
+   * become one shared identity for every unidentified caller. During local
+   * development, where nothing identifies the caller, it falls back to
+   * `"127.0.0.1"` instead.
+   *
+   * If your own CDN or load balancer sits in front of Zuplo, this is the
+   * address of that hop rather than the end user's.
+   *
+   * @see {@link https://zuplo.com/docs/articles/check-ip-address} for when
+   * this address can be trusted on each deployment type.
+   *
+   * @example
+   * ```ts
+   * export default async function (request: ZuploRequest, context: ZuploContext) {
+   *   const ip = context.incomingRequestProperties.ip;
+   *   return new Response(ip ?? "unknown");
+   * }
+   * ```
+   */
+  readonly ip: string | undefined;
   /**
    * ASN of the incoming request, for example, 395747.
    */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.73.30",
+  "version": "6.74.2",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {
@@ -45,7 +45,9 @@
   },
   "dependencies": {
     "@cfworker/json-schema": "4.1.1",
+    "@modelcontextprotocol/core": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/server": "^2.0.0",
     "@opentelemetry/api": "1.9.0",
     "@opentelemetry/api-logs": "0.220.0",
     "ajv": "^8.17.1",
@@ -55,6 +57,6 @@
     "jose": "^5.6.3",
     "path-to-regexp": "^6.3.0",
     "uuid": "^11.1.0",
-    "zod": "3.25.76"
+    "zod": "4.4.3"
   }
 }