@zuplo/runtime 7.14.6 → 7.14.8

package/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{G as p,M as c,Q as u}from"../chunk-JORDKCQ5.js";import"../chunk-VP5Q3DEN.js";import{a as d}from"../chunk-AEVCZW3D.js";import"../chunk-A3QGJZO7.js";import"../chunk-G2O2ZIL3.js";import"../chunk-UKQQD2JN.js";import{aa as i}from"../chunk-VIH2ISEH.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
+import{G as p,M as c,Q as u}from"../chunk-DB6LKZ36.js";import"../chunk-VP5Q3DEN.js";import{a as d}from"../chunk-PY52EHDX.js";import"../chunk-A3QGJZO7.js";import"../chunk-6R2COTV6.js";import"../chunk-UKQQD2JN.js";import{aa as i}from"../chunk-2HVCLUM4.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
 //# sourceMappingURL=index.js.map

package/out/esm/sdks/aws/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{H as a,I as l,J as c,K as o,N as p,O as y,P as m}from"../../chunk-G2O2ZIL3.js";import"../../chunk-UKQQD2JN.js";import"../../chunk-VIH2ISEH.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
+import{H as a,I as l,J as c,K as o,N as p,O as y,P as m}from"../../chunk-6R2COTV6.js";import"../../chunk-UKQQD2JN.js";import"../../chunk-2HVCLUM4.js";import{a as i}from"../../chunk-TYV53J3B.js";async function g(r,e){let t=typeof e.credentials=="function"?await e.credentials():e.credentials,n=r.method,d=n!=="GET"&&n!=="HEAD"&&r.body!=null?await r.arrayBuffer():null,s=await new o({method:n,url:r.url,headers:r.headers,body:d,accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,service:e.service,region:e.region,signQuery:e.signQuery}).sign();return new Request(s.url.toString(),{method:s.method,headers:s.headers,body:s.body})}i(g,"signRequest");export{c as AwsClient,o as AwsV4Signer,p as fromTemporaryCredentials,y as fromWebToken,m as fromZuploIdentity,l as getAwsCredentialProvider,a as setAwsCredentialProvider,g as signRequest};
 //# sourceMappingURL=index.js.map

package/out/types/index.d.ts

@@ -4352,9 +4352,11 @@ declare interface CompatibilityFlags {
    * precompiled Ajv validators from the OpenAPI document, validated per the
    * dialect and OpenAPI version they declare (specs/mcp-tool-schemas.md), and
    * `prompts/list` also lists the arguments behind a prompt schema's `$ref`
-   * and `allOf`. `request-validation-inbound` validates with the same dialect,
-   * `format` and pattern rules, and keeps its parameter type coercion
-   * (specs/compat-improved-schema-validation.md).
+   * and `allOf`. A tool set to `toolInputStyle: "flat"` whose input can't be
+   * fully flattened fails the build instead of staying nested
+   * (specs/mcp-flat-input.md FLAT-18). `request-validation-inbound` validates
+   * with the same dialect, `format` and pattern rules, and keeps its parameter
+   * type coercion (specs/compat-improved-schema-validation.md).
    *
    * @compatibilityDate 2026-11-06
    */
@@ -4433,10 +4435,11 @@ declare interface CompatibilityFlags {
   omitMcpFieldsNewerThanNegotiatedVersion: boolean;
   /**
    * Whether built-in policies treat an empty or whitespace-only value for an
-   * optional string option as if the option were left out.
+   * optional string option as if the option were left out, and reject one for
+   * a required string option.
    *
    * `$env(VAR)` with `VAR` defined but empty reaches a policy as `""`, so this
-   * decides what an empty environment variable does to an optional option.
+   * decides what an empty environment variable does to a policy option.
    *
    * Before this flag: Many policies reject `""`. Some fail every request with
    * a `ConfigurationError` (for example `http-deprecation-outbound` `link`,
@@ -4451,6 +4454,12 @@ declare interface CompatibilityFlags {
    * current behavior. `BLANK_IS_NOT_UNSET` in
    * `policies/optional-string-options.spec.ts` lists them with the reason.
    *
+   * A required string option that is empty or whitespace-only fails with a
+   * `ConfigurationError` naming the option when the policy is created, instead
+   * of being sent as a blank credential, host or header. Required options
+   * where an empty value means something (`replace-string-outbound`
+   * `replaceWith`, `set-body-inbound` `body`) are used as given.
+   *
    * @compatibilityDate 2026-11-06
    */
   treatBlankOptionalStringOptionsAsUnset: boolean;

package/out/types/internal/index.d.ts

@@ -223,9 +223,11 @@ declare interface CompatibilityFlags {
    * precompiled Ajv validators from the OpenAPI document, validated per the
    * dialect and OpenAPI version they declare (specs/mcp-tool-schemas.md), and
    * `prompts/list` also lists the arguments behind a prompt schema's `$ref`
-   * and `allOf`. `request-validation-inbound` validates with the same dialect,
-   * `format` and pattern rules, and keeps its parameter type coercion
-   * (specs/compat-improved-schema-validation.md).
+   * and `allOf`. A tool set to `toolInputStyle: "flat"` whose input can't be
+   * fully flattened fails the build instead of staying nested
+   * (specs/mcp-flat-input.md FLAT-18). `request-validation-inbound` validates
+   * with the same dialect, `format` and pattern rules, and keeps its parameter
+   * type coercion (specs/compat-improved-schema-validation.md).
    *
    * @compatibilityDate 2026-11-06
    */
@@ -304,10 +306,11 @@ declare interface CompatibilityFlags {
   omitMcpFieldsNewerThanNegotiatedVersion: boolean;
   /**
    * Whether built-in policies treat an empty or whitespace-only value for an
-   * optional string option as if the option were left out.
+   * optional string option as if the option were left out, and reject one for
+   * a required string option.
    *
    * `$env(VAR)` with `VAR` defined but empty reaches a policy as `""`, so this
-   * decides what an empty environment variable does to an optional option.
+   * decides what an empty environment variable does to a policy option.
    *
    * Before this flag: Many policies reject `""`. Some fail every request with
    * a `ConfigurationError` (for example `http-deprecation-outbound` `link`,
@@ -322,6 +325,12 @@ declare interface CompatibilityFlags {
    * current behavior. `BLANK_IS_NOT_UNSET` in
    * `policies/optional-string-options.spec.ts` lists them with the reason.
    *
+   * A required string option that is empty or whitespace-only fails with a
+   * `ConfigurationError` naming the option when the policy is created, instead
+   * of being sent as a blank credential, host or header. Required options
+   * where an empty value means something (`replace-string-outbound`
+   * `replaceWith`, `set-body-inbound` `body`) are used as given.
+   *
    * @compatibilityDate 2026-11-06
    */
   treatBlankOptionalStringOptionsAsUnset: boolean;

package/out/types/mcp-gateway/index.d.ts

@@ -2925,6 +2925,46 @@ export declare function McpProxyHandler(
   context: ZuploContext
 ): Promise<Response>;
 
+/**
+ * OpenTelemetry options for the MCP Gateway's `McpProxyHandler`, set under
+ * `telemetry` in the route's handler options. The same options as the MCP
+ * Server handler's `telemetry`.
+ */
+export declare interface McpProxyHandlerTelemetryOptions {
+  /**
+   * Record tool call content on the MCP SERVER and CLIENT spans of a
+   * forwarded `tools/call`: the arguments the client sent as
+   * `gen_ai.tool.call.arguments` and, when the upstream returns a result
+   * without `isError: true`, that result as `gen_ai.tool.call.result`. Both
+   * are JSON strings capped at 8192 UTF-16 code units.
+   *
+   * Off by default. Tool arguments and results often contain personal or
+   * otherwise sensitive data, and enabling this sends them to your telemetry
+   * backend.
+   *
+   * The gateway records content only for a `tools/call` it forwards upstream.
+   * A call a gateway policy answers itself (for example, by asking the client
+   * to connect the upstream) records neither attribute. A result is recorded
+   * when the JSON response, or the SSE event that carries it, is 1 MiB or
+   * less; a larger result is forwarded to the client but not recorded.
+   *
+   * @example
+   * ```json
+   * {
+   *   "handler": {
+   *     "export": "McpProxyHandler",
+   *     "module": "$import(@zuplo/runtime/mcp-gateway)",
+   *     "options": {
+   *       "rewritePattern": "https://mcp.example.com/mcp",
+   *       "telemetry": { "captureToolCallContent": true }
+   *     }
+   *   }
+   * }
+   * ```
+   */
+  captureToolCallContent?: boolean;
+}
+
 /**
  * Resolve a gateway-managed upstream MCP credential and apply it to the
  * request before the normal Zuplo route handler forwards the request.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.14.6",
+  "version": "7.14.8",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {