@zuplo/runtime 7.8.23 → 7.8.25

package/out/types/index.d.ts

@@ -21,123 +21,61 @@ export declare type AiFormat =
   | "anthropic-messages";
 
 /**
- * Converts Anthropic Messages API format requests to OpenAI Chat Completions format.
- * This policy translates between the two formats to allow seamless routing to different providers.
- *
- * @deprecated Platform AI Gateway routes use native Anthropic passthrough. This
- * policy is retained for legacy custom routes that explicitly require translation.
- *
- * @hidden
- * @title Anthropic to OpenAI Format Translator
- * @product ai-gateway
- * @param request - The incoming ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy configuration options
- * @param policyName - The name of the policy instance
- * @returns A modified ZuploRequest with translated body format
- */
-export declare const AIGatewayAnthropicToOpenAIInboundPolicy: InboundPolicyHandler<AIGatewayAnthropicToOpenAIInboundPolicyOptions>;
-
-/**
- * Options for the AI Gateway Anthropic to OpenAI format translator policy.
- * @public
- */
-export declare interface AIGatewayAnthropicToOpenAIInboundPolicyOptions {}
-
-/**
- * Authenticates an AI Gateway Application requests based on Application API Keys
- * using Zuplo's Gateway service.
- * This policy validates API keys against the Api keys bucket, fetches configuration data,
- * caches results for performance, and automatically adds user information to
- * authenticated requests.
- * @hidden
- * @title AI Gateway Authentication
+ * Akamai AI Firewall Inbound Policy
+ * @title Akamai AI Firewall
  * @product ai-gateway
- * @public
- *
- * @param request - The incoming ZuploRequest
- * @param context - The ZuploContext
- * @param unparsedOptions - The policy configuration options
- * @param policyName - The name of the policy instance
- * @returns The authenticated request with user info, or a 401 response if unauthorized
+ * @requiresAI
  *
- * @example
- * ```json
- * // policies.json - Basic AI Gateway authentication
- * {
- *   "name": "ai-gateway-auth",
- *   "policyType": "ai-gateway-auth-inbound",
- *   "handler": {
- *     "export": "AIGatewayAuthInboundPolicy",
- *     "module": "$import(@zuplo/runtime)",
- *     "options": {
- *        "cacheTtlSeconds": 300
- *     }
- *   }
- * }
- * ```
+ * Detects and blocks malicious AI inputs and outputs via Akamai's AI Firewall
+ * service. Settings come from the policy options (configurationId, api-key,
+ * applicationId, streamingAccumulation), and presence in the route's
+ * `inbound[]` chain is what enables it.
  *
- * @example
- * ```json
- * // Custom header and auth scheme
- * {
- *   "handler": {
- *     "export": "AIGatewayAuthInboundPolicy",
- *     "module": "$import(@zuplo/runtime)",
- *     "options": {
- *       "authHeader": "x-api-key",
- *       "authScheme": ""
- *     }
- *   }
- * }
- * ```
+ * Options are validated at request time and invalid options fail closed with a
+ * ConfigurationError. Detect-call failures (invalid credentials, rate limits,
+ * outages) also fail closed by default, returning a 502 in the route's native
+ * error format; set `onError: "allow"` to fail open and prioritize
+ * availability over inspection.
  *
- * @example
- * ```typescript
- * // Access authenticated user data in handler
- * export function myHandler(request: ZuploRequest, context: ZuploContext) {
- *   // User is automatically added by AI Gateway policy
- *   const user = request.user;
- *   context.log.info(`Request from API key: ${user.sub}`);
+ * For streaming responses it uses a transform stream that can block content
+ * mid-stream if harmful content is detected.
  *
- *   // Access AI Gateway configuration and metadata
- *   const userData = user.data as {
- *     metadata: Record<string, unknown>;
- *     configuration: Record<string, unknown>;
- *   };
+ * Do not add this policy to the inbound chain of an app used as a Smart
+ * Router classifier (`classifierAppID`). The firewall would inspect Smart
+ * Router's internal classification call as if it were a completion request,
+ * and Smart Router fails open on the resulting denial — so this is rejected
+ * with a `ConfigurationError` rather than silently degrading classification.
  *
- *   return Response.json({
- *     message: `Hello ${user.sub}`,
- *     config: userData.configuration
- *   });
- * }
- * ```
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
  */
-export declare function AIGatewayAuthInboundPolicy(
+declare function AIGatewayAkamaiFirewallInboundPolicy(
   request: ZuploRequest,
   context: ZuploContext,
-  unparsedOptions: AIGatewayAuthInboundPolicyOptions,
+  unparsedOptions: unknown,
   policyName: string
-): Promise<Response | ZuploRequest<RequestGeneric>>;
+): Promise<ZuploRequest | Response>;
+export { AIGatewayAkamaiFirewallInboundPolicy };
+export { AIGatewayAkamaiFirewallInboundPolicy as AkamaiAIFirewallV2InboundPolicy };
 
 /**
- * The options for this policy.
+ * The options for the Akamai AI Firewall policy.
  * @public
  */
-export declare interface AIGatewayAuthInboundPolicyOptions {
-  /**
-   * The time to cache authentication results for a particular key. Higher values will decrease latency. Cached results will be valid until the cache expires even in the event the key is deleted, etc.
-   */
-  cacheTtlSeconds?: number;
-  /**
-   * The name of the header with the key.
-   */
-  authHeader?: string;
-  /**
-   * The scheme used on the header.
-   */
-  authScheme?: string;
+declare interface AIGatewayAkamaiFirewallInboundPolicyOptions {
+  configurationId: ConfigurationID;
+  "api-key": APIKey;
+  applicationId?: ApplicationID;
+  streamingAccumulation?: StreamingAccumulationSettings;
+  endpoints?: ApplicableEndpoints;
+  onUnknownShape?: OnUnknownShape;
+  onError?: OnFirewallError;
 }
+export { AIGatewayAkamaiFirewallInboundPolicyOptions };
+export { AIGatewayAkamaiFirewallInboundPolicyOptions as AkamaiAIFirewallV2PolicyOptions };
 
 /**
  * Authenticates requests to an AI Gateway endpoint with application API keys.
@@ -180,9 +118,9 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
  * // policies.json - Authenticate an AI Gateway route
  * {
  *   "name": "ai-gateway-auth",
- *   "policyType": "ai-gateway-auth-v2",
+ *   "policyType": "ai-gateway-auth",
  *   "handler": {
- *     "export": "AIGatewayAuthV2InboundPolicy",
+ *     "export": "AIGatewayAuthInboundPolicy",
  *     "module": "$import(@zuplo/runtime)",
  *     "options": {
  *        "cacheTtlSeconds": 300
@@ -196,7 +134,7 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
  * // Accept an app key from a custom header
  * {
  *   "handler": {
- *     "export": "AIGatewayAuthV2InboundPolicy",
+ *     "export": "AIGatewayAuthInboundPolicy",
  *     "module": "$import(@zuplo/runtime)",
  *     "options": {
  *       "authHeader": "x-api-key",
@@ -207,18 +145,20 @@ export declare interface AIGatewayAuthInboundPolicyOptions {
  * ```
  *
  */
-export declare function AIGatewayAuthV2InboundPolicy(
+declare function AIGatewayAuthInboundPolicy(
   request: ZuploRequest,
   context: ZuploContext,
-  unparsedOptions: AIGatewayAuthV2InboundPolicyOptions,
+  unparsedOptions: AIGatewayAuthInboundPolicyOptions,
   policyName: string
 ): Promise<Response | ZuploRequest<RequestGeneric>>;
+export { AIGatewayAuthInboundPolicy };
+export { AIGatewayAuthInboundPolicy as AIGatewayAuthV2InboundPolicy };
 
 /**
  * The options for this policy.
  * @public
  */
-export declare interface AIGatewayAuthV2InboundPolicyOptions {
+declare interface AIGatewayAuthInboundPolicyOptions {
   /**
    * The time to cache authentication results for a particular key. Higher values will decrease latency. Cached results will be valid until the cache expires even in the event the key is deleted, etc.
    */
@@ -236,6 +176,8 @@ export declare interface AIGatewayAuthV2InboundPolicyOptions {
    */
   credentialPassthrough?: boolean;
 }
+export { AIGatewayAuthInboundPolicyOptions };
+export { AIGatewayAuthInboundPolicyOptions as AIGatewayAuthV2InboundPolicyOptions };
 
 /**
  * An AI Gateway capability that can have a resolved model selection.
@@ -262,7 +204,7 @@ export declare type AIGatewayCapability =
  * gateway root.
  *
  * Place this policy on AI Gateway routes after optional authentication and
- * optional `ai-gateway-configuration-loader-v2-inbound`. When either of those
+ * optional `ai-gateway-configuration-loader-inbound`. When either of those
  * already populated the app-configuration channel, this policy reuses it.
  * Otherwise it loads the configuration with the route's `app_id` path
  * parameter. Applications select from policies pre-declared by the gateway.
@@ -277,11 +219,11 @@ export declare type AIGatewayCapability =
  * @product ai-gateway
  * @requiresAI
  */
-export declare class AIGatewayConfigurationExecutorV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationExecutorV2InboundPolicyOptions> {
+declare class AIGatewayConfigurationExecutorInboundPolicy extends InboundPolicy<AIGatewayConfigurationExecutorInboundPolicyOptions> {
   #private;
-  static readonly policyType = "ai-gateway-configuration-executor-v2";
+  static readonly policyType = "ai-gateway-configuration-executor";
   constructor(
-    options: AIGatewayConfigurationExecutorV2InboundPolicyOptions,
+    options: AIGatewayConfigurationExecutorInboundPolicyOptions,
     policyName: string
   );
   handler(
@@ -295,25 +237,29 @@ export declare class AIGatewayConfigurationExecutorV2InboundPolicy extends Inbou
   private getConsumerSub;
   private createQuotaExceededResponse;
 }
+export { AIGatewayConfigurationExecutorInboundPolicy };
+export { AIGatewayConfigurationExecutorInboundPolicy as AIGatewayConfigurationExecutorV2InboundPolicy };
 
 /**
  * Options for loading each application's AI Gateway configuration and running its inbound policy chain.
  * @public
  */
-export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {
+declare interface AIGatewayConfigurationExecutorInboundPolicyOptions {
   /**
-   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. This cache is only used when neither ai-gateway-auth-v2-inbound nor ai-gateway-configuration-loader-v2-inbound already loaded the configuration for the request.
+   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. This cache is only used when neither ai-gateway-auth-inbound nor ai-gateway-configuration-loader-inbound already loaded the configuration for the request.
    */
   cacheTtlSeconds?: number;
 }
+export { AIGatewayConfigurationExecutorInboundPolicyOptions };
+export { AIGatewayConfigurationExecutorInboundPolicyOptions as AIGatewayConfigurationExecutorV2InboundPolicyOptions };
 
 /**
  * Loads the AI Gateway app configuration for the request into the
  * request-scoped channel and does nothing else.
  *
  * Place this policy on AI Gateway routes before
- * `ai-gateway-configuration-executor-v2-inbound` when you want configuration
- * loading separated from chain execution. When `ai-gateway-auth-v2-inbound`
+ * `ai-gateway-configuration-executor-inbound` when you want configuration
+ * loading separated from chain execution. When `ai-gateway-auth-inbound`
  * already populated the channel, this policy reuses it. Otherwise it loads
  * the configuration with the route's `app_id` path parameter.
  *
@@ -324,11 +270,11 @@ export declare interface AIGatewayConfigurationExecutorV2InboundPolicyOptions {
  * @product ai-gateway
  * @requiresAI
  */
-export declare class AIGatewayConfigurationLoaderV2InboundPolicy extends InboundPolicy<AIGatewayConfigurationLoaderV2InboundPolicyOptions> {
+declare class AIGatewayConfigurationLoaderInboundPolicy extends InboundPolicy<AIGatewayConfigurationLoaderInboundPolicyOptions> {
   #private;
-  static readonly policyType = "ai-gateway-configuration-loader-v2";
+  static readonly policyType = "ai-gateway-configuration-loader";
   constructor(
-    options: AIGatewayConfigurationLoaderV2InboundPolicyOptions,
+    options: AIGatewayConfigurationLoaderInboundPolicyOptions,
     policyName: string
   );
   handler(
@@ -336,17 +282,21 @@ export declare class AIGatewayConfigurationLoaderV2InboundPolicy extends Inbound
     context: ZuploContext
   ): Promise<ZuploRequest | Response>;
 }
+export { AIGatewayConfigurationLoaderInboundPolicy };
+export { AIGatewayConfigurationLoaderInboundPolicy as AIGatewayConfigurationLoaderV2InboundPolicy };
 
 /**
  * Options for loading each application's AI Gateway configuration into the request-scoped channel.
  * @public
  */
-export declare interface AIGatewayConfigurationLoaderV2InboundPolicyOptions {
+declare interface AIGatewayConfigurationLoaderInboundPolicyOptions {
   /**
-   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. When ai-gateway-auth-v2-inbound already loaded the configuration for the request, this cache is not used.
+   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. When ai-gateway-auth-inbound already loaded the configuration for the request, this cache is not used.
    */
   cacheTtlSeconds?: number;
 }
+export { AIGatewayConfigurationLoaderInboundPolicyOptions };
+export { AIGatewayConfigurationLoaderInboundPolicyOptions as AIGatewayConfigurationLoaderV2InboundPolicyOptions };
 
 /**
  * Data Loss Prevention (DLP) Inbound Policy for the AI Gateway
@@ -404,8 +354,8 @@ export declare interface AIGatewayDlpInboundPolicyOptions {
    */
   scanToolArguments?: boolean;
   streaming?: DlpStreamingSettings;
-  endpoints?: ApplicableEndpoints;
-  onUnknownShape?: OnUnknownShape;
+  endpoints?: ApplicableEndpoints_2;
+  onUnknownShape?: OnUnknownShape_2;
   onError?: OnEngineError;
   /**
    * The detection engine. Only `builtin` (in-gateway regex + checksum detection with context-word scoring; no data egress) is available today. Declaring the discriminator now keeps future engines an additive, non-breaking change.
@@ -440,24 +390,87 @@ export declare interface AIGatewayDlpInboundPolicyOptions {
  * }
  * ```
  */
-export declare class AIGatewayFallbackModelV2InboundPolicy extends InboundPolicy<AIGatewayFallbackModelV2InboundPolicyOptions> {
+declare class AIGatewayFallbackModelInboundPolicy extends InboundPolicy<AIGatewayFallbackModelInboundPolicyOptions> {
   #private;
-  static readonly policyType = "ai-gateway-fallback-model-v2";
+  static readonly policyType = "ai-gateway-fallback-model";
   constructor(
-    options: AIGatewayFallbackModelV2InboundPolicyOptions,
+    options: AIGatewayFallbackModelInboundPolicyOptions,
     policyName: string
   );
   handler(request: ZuploRequest, context: ZuploContext): Promise<ZuploRequest>;
 }
+export { AIGatewayFallbackModelInboundPolicy };
+export { AIGatewayFallbackModelInboundPolicy as AIGatewayFallbackModelV2InboundPolicy };
 
 /**
  * Options for adding failure and quota fallbacks to an existing AI Gateway model selection.
  * @public
  */
-export declare interface AIGatewayFallbackModelV2InboundPolicyOptions {
+declare interface AIGatewayFallbackModelInboundPolicyOptions {
   models: FallbackModels;
   fallbackTimeoutSeconds?: FallbackTimeoutSeconds;
 }
+export { AIGatewayFallbackModelInboundPolicyOptions };
+export { AIGatewayFallbackModelInboundPolicyOptions as AIGatewayFallbackModelV2InboundPolicyOptions };
+
+/**
+ * Galileo Tracing Inbound Policy
+ * @title Galileo Tracing
+ * @product ai-gateway
+ * @requiresAI
+ *
+ * Traces both streaming and non-streaming AI Gateway responses to Galileo's LLM
+ * observability platform, creating complete traces with workflow and LLM spans
+ * when responses complete. Credentials (apiKey, projectId, logStreamId, baseUrl)
+ * come from the policy options. The authenticated app configuration is used
+ * only to label the model; presence in the route's chain is what enables the
+ * policy.
+ *
+ * For streaming responses, it clones the response stream and processes it in
+ * the background using `waitUntil`, allowing the original stream to pass through
+ * unmodified while still capturing the complete content for tracing.
+ *
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
+ */
+declare function AIGatewayGalileoTracingInboundPolicy(
+  request: ZuploRequest,
+  context: ZuploContext,
+  options: AIGatewayGalileoTracingInboundPolicyOptions,
+  _policyName: string
+): Promise<ZuploRequest | Response>;
+export { AIGatewayGalileoTracingInboundPolicy };
+export { AIGatewayGalileoTracingInboundPolicy as GalileoTracingV2InboundPolicy };
+
+/**
+ * Track AI Gateway requests and responses using Galileo's LLM observability platform.
+ * @public
+ */
+declare interface AIGatewayGalileoTracingInboundPolicyOptions {
+  /**
+   * The Galileo API key for authentication.
+   */
+  apiKey: string;
+  /**
+   * The Galileo project ID (UUID) for organizing traces.
+   */
+  projectId: string;
+  /**
+   * The Galileo log stream ID (UUID) for organizing traces.
+   */
+  logStreamId: string;
+  /**
+   * The base URL for the Galileo API (optional, defaults to https://api.galileo.ai).
+   */
+  baseUrl?: string;
+  endpoints?: ApplicableEndpoints_3;
+  onUnknownShape?: OnUnknownShape_3;
+}
+export { AIGatewayGalileoTracingInboundPolicyOptions };
+export { AIGatewayGalileoTracingInboundPolicyOptions as GalileoTracingV2PolicyOptions };
 
 /**
  * Handler that routes AI/LLM requests through Zuplo's LLM Translation Layer.
@@ -569,109 +582,6 @@ export declare interface AIGatewayInternalOnlyInboundPolicyOptions {}
 
 /* Excluded from this release type: AIGatewayMeterIncrements */
 
-/**
- * AI Gateway Metering policy for quota enforcement.
- * This policy is meant to be used as singleton.
- * You should only have one for your entire Gateway.
- *
- * The AI Gateway authentication policy provides the application's
- * configuration and must run earlier on the route.
- *
- * Metering runs at most once per request: when the policy appears more than
- * once in the effective chain (for example repeated
- * `configuration.inboundPolicyChain` entries, or a static route entry plus a
- * chain entry), only the first occurrence checks quotas and registers the
- * meter-increment hook, so usage is never billed twice.
- *
- * @title AI Gateway Metering
- * @product ai-gateway
- * @hidden
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare class AIGatewayMeteringInboundPolicy extends InboundPolicy<AIGatewayMeteringInboundPolicyOptions> {
-  static readonly policyType = "ai-gateway-metering";
-  /**
-   * Set the meter increments for the current request.
-   *
-   * @param context - The ZuploContext
-   * @param increments - The increments to set.
-   */
-  static setIncrements(
-    context: ZuploContext,
-    increments: AIGatewayMeterIncrements
-  ): void;
-  static getIncrements(context: ZuploContext): AIGatewayMeterIncrements;
-  /**
-   * Record the global quota fallback models for the current request. Set by the
-   * metering policy when a quota is exceeded and a fallback is configured; read
-   * by the LLM translation handler, which routes to the capability-appropriate
-   * model instead of the (over-budget) primary.
-   *
-   * @param context - The ZuploContext
-   * @param quotaFallback - The validated quota fallback models.
-   */
-  static setQuotaFallback(
-    context: ZuploContext,
-    quotaFallback: QuotaFallbackModels
-  ): void;
-  static getQuotaFallback(
-    context: ZuploContext
-  ): QuotaFallbackModels | undefined;
-  handler(
-    request: ZuploRequest,
-    context: ZuploContext
-  ): Promise<Response | ZuploRequest<RequestGeneric>>;
-  private fetchCurrentMeters;
-  /**
-   * The capability a request targets, derived from its path, or `undefined` for
-   * paths that do not support quota fallback (e.g. `/v1/responses`, which the LLM
-   * handler serves without the fallback chain). Used to decide whether a quota
-   * fallback actually applies to *this* request.
-   */
-  private requestCapability;
-  /**
-   * Validate and return the configured quota fallback when it applies to *this*
-   * request's capability, or `undefined` otherwise. A resolved selection is
-   * already validated and returns a presence-only marker; legacy configuration
-   * is customer-authored and validated through Zod before use. Returning
-   * `undefined` blocks the request with a 429, so a fallback is counted only
-   * when the handler can serve the request with it.
-   */
-  private resolveQuotaFallback;
-  private checkHierarchicalQuotaLimits;
-  /**
-   * Increment meters via API. Can be used by providers for streaming responses.
-   *
-   * @param configurationId - The AI Gateway configuration ID
-   * @param increments - The meter increments to send
-   * @param context - The ZuploContext for logging
-   * @returns Promise that resolves when meters are incremented
-   */
-  static incrementMeters(
-    configurationId: string,
-    increments: AIGatewayMeterIncrements,
-    context: ZuploContext
-  ): Promise<void>;
-  private checkWarnings;
-  private checkQuotaWarning;
-  private createHierarchicalQuotaExceededResponse;
-}
-
-/**
- * The options for this policy.
- * @public
- */
-export declare interface AIGatewayMeteringInboundPolicyOptions {
-  /**
-   * If true, the policy will throw an error in the event there is a problem connecting to the metering service.
-   */
-  throwOnFailure?: boolean;
-}
-
 /**
  * Meters AI Gateway usage and enforces limits configured by the application.
  *
@@ -687,11 +597,11 @@ export declare interface AIGatewayMeteringInboundPolicyOptions {
  * @param policyName - The name of the policy as set in policies.json
  * @returns The request, or a 429 response when a limit is exceeded
  */
-export declare class AIGatewayMeteringV2InboundPolicy extends InboundPolicy<AIGatewayMeteringV2InboundPolicyOptions> {
+declare class AIGatewayMeteringInboundPolicy extends InboundPolicy<AIGatewayMeteringInboundPolicyOptions> {
   #private;
-  static readonly policyType = "ai-gateway-metering-v2";
+  static readonly policyType = "ai-gateway-metering";
   constructor(
-    options: AIGatewayMeteringV2InboundPolicyOptions,
+    options: AIGatewayMeteringInboundPolicyOptions,
     policyName: string
   );
   /** Set the meter increments accumulated for this request. */
@@ -727,12 +637,14 @@ export declare class AIGatewayMeteringV2InboundPolicy extends InboundPolicy<AIGa
   private findViolation;
   private createQuotaExceededResponse;
 }
+export { AIGatewayMeteringInboundPolicy };
+export { AIGatewayMeteringInboundPolicy as AIGatewayMeteringV2InboundPolicy };
 
 /**
  * Options for metering AI Gateway usage and enforcing request-time limits.
  * @public
  */
-export declare interface AIGatewayMeteringV2InboundPolicyOptions {
+declare interface AIGatewayMeteringInboundPolicyOptions {
   /**
    * Throw when the metering service is unavailable instead of failing open.
    */
@@ -770,31 +682,35 @@ export declare interface AIGatewayMeteringV2InboundPolicyOptions {
     requests?: QuotaLimit;
   };
 }
+export { AIGatewayMeteringInboundPolicyOptions };
+export { AIGatewayMeteringInboundPolicyOptions as AIGatewayMeteringV2InboundPolicyOptions };
 
 /**
  * Usage-limit settings accepted by the `options.limits` policy option.
  */
-export declare interface AIGatewayMeteringV2LimitOverrides {
-  costs?: AIGatewayMeteringV2MeterLimitOverrides;
-  tokens?: AIGatewayMeteringV2MeterLimitOverrides;
-  requests?: AIGatewayMeteringV2MeterLimitOverrides;
+declare interface AIGatewayMeteringLimitOverrides {
+  costs?: AIGatewayMeteringMeterLimitOverrides;
+  tokens?: AIGatewayMeteringMeterLimitOverrides;
+  requests?: AIGatewayMeteringMeterLimitOverrides;
 }
+export { AIGatewayMeteringLimitOverrides };
+export { AIGatewayMeteringLimitOverrides as AIGatewayMeteringV2LimitOverrides };
 
 /** Daily and monthly settings for one usage meter. */
-declare interface AIGatewayMeteringV2MeterLimitOverrides {
-  daily?: AIGatewayMeteringV2PeriodLimitOverride;
-  monthly?: AIGatewayMeteringV2PeriodLimitOverride;
+declare interface AIGatewayMeteringMeterLimitOverrides {
+  daily?: AIGatewayMeteringPeriodLimitOverride;
+  monthly?: AIGatewayMeteringPeriodLimitOverride;
 }
 
 /** Settings for one usage-limit period. */
-declare interface AIGatewayMeteringV2PeriodLimitOverride {
+declare interface AIGatewayMeteringPeriodLimitOverride {
   enabled?: boolean;
   limit?: number;
-  warning?: AIGatewayMeteringV2WarningLimitOverride;
+  warning?: AIGatewayMeteringWarningLimitOverride;
 }
 
 /** Warning settings for one usage-limit period. */
-declare interface AIGatewayMeteringV2WarningLimitOverride {
+declare interface AIGatewayMeteringWarningLimitOverride {
   enabled?: boolean;
   threshold?: number;
 }
@@ -825,11 +741,11 @@ declare interface AIGatewayMeteringV2WarningLimitOverride {
  * }
  * ```
  */
-export declare class AIGatewayModelFilteringV2InboundPolicy extends InboundPolicy<AIGatewayModelFilteringV2InboundPolicyOptions> {
+declare class AIGatewayModelFilteringInboundPolicy extends InboundPolicy<AIGatewayModelFilteringInboundPolicyOptions> {
   #private;
-  static readonly policyType = "ai-gateway-model-filtering-v2";
+  static readonly policyType = "ai-gateway-model-filtering";
   constructor(
-    options: AIGatewayModelFilteringV2InboundPolicyOptions,
+    options: AIGatewayModelFilteringInboundPolicyOptions,
     policyName: string
   );
   handler(
@@ -837,14 +753,18 @@ export declare class AIGatewayModelFilteringV2InboundPolicy extends InboundPolic
     context: ZuploContext
   ): Promise<ZuploRequest | Response>;
 }
+export { AIGatewayModelFilteringInboundPolicy };
+export { AIGatewayModelFilteringInboundPolicy as AIGatewayModelFilteringV2InboundPolicy };
 
 /**
  * Options for allowing or blocking providerName/model references for each AI Gateway capability.
  * @public
  */
-export declare interface AIGatewayModelFilteringV2InboundPolicyOptions {
+declare interface AIGatewayModelFilteringInboundPolicyOptions {
   models: Models;
 }
+export { AIGatewayModelFilteringInboundPolicyOptions };
+export { AIGatewayModelFilteringInboundPolicyOptions as AIGatewayModelFilteringV2InboundPolicyOptions };
 
 /**
  * Catalog information about an AI Gateway model.
@@ -970,29 +890,62 @@ export declare const AIGatewayModels: {
 };
 
 /**
- * Converts OpenAI Chat Completions format responses back to Anthropic Messages format.
- * This policy translates the response when the original request was in Anthropic format.
+ * Comet Opik Tracing Inbound Policy
+ * @title Comet Opik Tracing
+ * @product ai-gateway
+ * @requiresAI
  *
- * @deprecated Platform AI Gateway routes use native Anthropic passthrough. This
- * policy is retained for legacy custom routes that explicitly require translation.
+ * Traces both streaming and non-streaming AI Gateway responses to Comet Opik,
+ * creating traces when requests start and spans when responses complete.
+ * Credentials (apiKey, projectName, workspace, baseUrl) come from the policy
+ * options. The authenticated app configuration is used only to label the
+ * model; presence in the route's chain is what enables the policy.
  *
- * @hidden
- * @title OpenAI to Anthropic Format Translator
- * @product ai-gateway
- * @param response - The response from the upstream service
- * @param request - The incoming ZuploRequest
+ * For streaming responses, it clones the response stream and processes it in
+ * the background using `waitUntil`, allowing the original stream to pass through
+ * unmodified while still capturing the complete content for tracing.
+ *
+ * @param request - The ZuploRequest
  * @param context - The ZuploContext
- * @param options - The policy configuration options
- * @param policyName - The name of the policy instance
- * @returns A modified Response with translated body format
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
  */
-export declare const AIGatewayOpenAIToAnthropicOutboundPolicy: OutboundPolicyHandler<AIGatewayOpenAIToAnthropicOutboundPolicyOptions>;
+declare function AIGatewayOpikTracingInboundPolicy(
+  request: ZuploRequest,
+  context: ZuploContext,
+  options: AIGatewayOpikTracingInboundPolicyOptions,
+  _policyName: string
+): Promise<ZuploRequest | Response>;
+export { AIGatewayOpikTracingInboundPolicy };
+export { AIGatewayOpikTracingInboundPolicy as CometOpikTracingV2InboundPolicy };
 
 /**
- * Options for the AI Gateway OpenAI to Anthropic format translator policy.
+ * Track AI Gateway requests and responses using Comet Opik's LLM observability platform.
  * @public
  */
-export declare interface AIGatewayOpenAIToAnthropicOutboundPolicyOptions {}
+declare interface AIGatewayOpikTracingInboundPolicyOptions {
+  /**
+   * The Comet Opik API key for authentication.
+   */
+  apiKey: string;
+  /**
+   * The Comet Opik project name for organizing traces.
+   */
+  projectName: string;
+  /**
+   * The Comet Opik workspace name.
+   */
+  workspace: string;
+  /**
+   * The base URL for the Comet Opik API (optional, defaults to https://www.comet.com/opik/api).
+   */
+  baseUrl?: string;
+  endpoints?: ApplicableEndpoints_4;
+  onUnknownShape?: OnUnknownShape_4;
+}
+export { AIGatewayOpikTracingInboundPolicyOptions };
+export { AIGatewayOpikTracingInboundPolicyOptions as CometOpikTracingV2PolicyOptions };
 
 /**
  * Prompt Injection Protection Policy
@@ -1068,7 +1021,7 @@ export declare function AIGatewayPromptInjectionPolicy(
  * @public
  */
 export declare interface AIGatewayPromptInjectionPolicyOptions {
-  apiKey?: APIKey;
+  apiKey?: APIKey_2;
   appId?: ClassifierAppID;
   execution?: Execution;
   recentMessageCount?: RecentMessageCount;
@@ -1076,8 +1029,8 @@ export declare interface AIGatewayPromptInjectionPolicyOptions {
   classifierPrompt?: ClassifierPrompt;
   baseUrl?: BaseURL;
   timeoutMs?: ClassifierTimeoutMs;
-  endpoints?: ApplicableEndpoints_2;
-  onUnknownShape?: OnUnknownShape_2;
+  endpoints?: ApplicableEndpoints_5;
+  onUnknownShape?: OnUnknownShape_5;
   onError?: OnClassifierError;
 }
 
@@ -1159,68 +1112,6 @@ export declare interface AIGatewayRouting {
   embeddings?: AIGatewayRouteTarget;
 }
 
-/**
- * AI Gateway Semantic Cache policy for caching chat completion responses
- * based on semantic similarity of user messages.
- *
- * This policy wraps the SemanticCacheInboundPolicy and applies it specifically
- * for AI Gateway chat completion endpoints. It uses configuration from the
- * user's metadata to determine whether caching should be applied and with
- * what tolerance.
- *
- * @title AI Gateway Semantic Cache
- * @product ai-gateway
- * @hidden
- * @requiresAI
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function AIGatewaySemanticCacheInboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: AIGatewaySemanticCacheInboundPolicyOptions,
-  policyName: string
-): Promise<Response | ZuploRequest<RequestGeneric>>;
-
-/**
- * Options for the AI Gateway Semantic Cache policy.
- * @public
- */
-export declare interface AIGatewaySemanticCacheInboundPolicyOptions {}
-
-/**
- * Outbound policy to handle response caching for AI Gateway.
- * This policy intercepts responses and handles caching for both
- * streaming and non-streaming responses.
- *
- * @title AI Gateway Semantic Cache
- * @product ai-gateway
- * @hidden
- * @requiresAI
- * @param response - The response from the upstream service
- * @param request - The original request
- * @param context - The ZuploContext
- * @param options - The policy options
- * @param policyName - The name of the policy
- * @returns The response (potentially modified for caching)
- */
-export declare function AIGatewaySemanticCacheOutboundPolicy(
-  response: Response,
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: AIGatewaySemanticCacheOutboundPolicyOptions,
-  policyName: string
-): Promise<Response>;
-
-/**
- * Options for the AI Gateway Semantic Cache Outbound policy.
- * @public
- */
-export declare interface AIGatewaySemanticCacheOutboundPolicyOptions {}
-
 /**
  * AI Gateway Semantic Cache policy. This inbound policy looks up the semantic
  * cache on entry and, on a miss, registers a response-sending hook to write the
@@ -1251,26 +1142,30 @@ export declare interface AIGatewaySemanticCacheOutboundPolicyOptions {}
  * @param policyName - The name of the policy as set in policies.json
  * @returns A Request or a Response
  */
-export declare function AIGatewaySemanticCacheV2InboundPolicy(
+declare function AIGatewaySemanticCacheInboundPolicy(
   request: ZuploRequest,
   context: ZuploContext,
-  options: AIGatewaySemanticCacheV2InboundPolicyOptions,
+  options: AIGatewaySemanticCacheInboundPolicyOptions,
   policyName: string
 ): Promise<Response | ZuploRequest<RequestGeneric>>;
+export { AIGatewaySemanticCacheInboundPolicy };
+export { AIGatewaySemanticCacheInboundPolicy as AIGatewaySemanticCacheV2InboundPolicy };
 
 /**
  * Options for the AI Gateway Semantic Cache policy. Configured inline in policies.json; the policy reads nothing from the AI Gateway configuration to decide whether to cache.
  * @public
  */
-export declare interface AIGatewaySemanticCacheV2InboundPolicyOptions {
+declare interface AIGatewaySemanticCacheInboundPolicyOptions {
   semanticTolerance?: SemanticTolerance;
   expirationSecondsTtl?: CacheTTLSeconds;
   namespace?: CacheNamespace;
   recentMessageCount?: RecentMessageCount_2;
   maxConversationLength?: MaxConversationLength;
-  endpoints?: ApplicableEndpoints_3;
-  onUnknownShape?: OnUnknownShape_3;
+  endpoints?: ApplicableEndpoints_6;
+  onUnknownShape?: OnUnknownShape_6;
 }
+export { AIGatewaySemanticCacheInboundPolicyOptions };
+export { AIGatewaySemanticCacheInboundPolicyOptions as AIGatewaySemanticCacheV2InboundPolicyOptions };
 
 /**
  * Reads and writes the Smart Router result for an AI Gateway request.
@@ -1426,54 +1321,6 @@ export declare interface AIGatewaySmartRouterTokenUsage {
   totalTokens: number;
 }
 
-/**
- * The options for this policy.
- * @public
- */
-export declare interface AIGatewayUsageTrackerOptions {}
-
-/**
- * Tracks AI Gateway usage including token consumption and costs based on
- * real-time model pricing from the Gateway service.
- *
- * This policy monitors AI model usage by:
- * - Extracting token usage from AI provider responses
- * - Fetching current model pricing from the Gateway service
- * - Calculating costs based on prompt and completion tokens
- * - Recording metrics for billing and monitoring
- * - Adding usage headers to responses for debugging
- * @hidden
- * @title AI Gateway Usage Tracker
- * @product ai-gateway
- * @param response - The response from the AI provider
- * @param request - The incoming ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy configuration options
- * @param policyName - The name of the policy instance
- * @returns The response with added usage headers
- *
- * @example
- * ```json
- * // policies.json - Basic usage tracking
- * {
- *   "name": "ai-usage-tracker",
- *   "policyType": "ai-gateway-usage-tracker",
- *   "handler": {
- *     "export": "AIGatewayUsageTrackerPolicy",
- *     "module": "$import(@zuplo/runtime)",
- *     "options": {}
- *   }
- * }
- * ```
- */
-export declare function AIGatewayUsageTrackerPolicy(
-  response: Response,
-  request: ZuploRequest,
-  context: ZuploContext,
-  _options: AIGatewayUsageTrackerOptions,
-  _policyName: string
-): Promise<Response>;
-
 /**
  * Common options every AI Gateway policy understands for scoping itself across
  * the multi-endpoint surface. A policy reads these from its own `options`.
@@ -1571,104 +1418,6 @@ export declare interface AiUsage {
   totalTokens: number;
 }
 
-/**
- * Akamai AI Firewall Inbound Policy
- * @title Akamai AI Firewall
- * @product ai-gateway
- * @hidden
- * @requiresAI
- *
- * This policy integrates with Akamai's AI Firewall service to detect and block
- * malicious AI inputs and outputs. It uses the shared AI Gateway shape and
- * streaming helpers for both streaming and non-streaming responses.
- *
- * For streaming responses, it uses a transform stream that can block
- * content mid-stream if harmful content is detected.
- *
- * Detect-call failures (invalid credentials, rate limits, outages) fail closed
- * by default, returning a 502 in the route's native error format; set
- * `onError: "allow"` in the app configuration (or in the policy options, which
- * the app configuration overrides) to fail open and prioritize availability
- * over inspection.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function AkamaiAIFirewallInboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: AkamaiAIFirewallPolicyOptions,
-  _policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * The options for the Akamai AI Firewall policy.
- * @public
- */
-export declare interface AkamaiAIFirewallPolicyOptions {
-  configurationId: ConfigurationID;
-  "api-key": APIKey_2;
-  applicationId?: ApplicationID;
-  streamingAccumulation?: StreamingAccumulationSettings;
-  onError?: OnFirewallError;
-}
-
-/**
- * Akamai AI Firewall Inbound Policy
- * @title Akamai AI Firewall
- * @product ai-gateway
- * @requiresAI
- *
- * Detects and blocks malicious AI inputs and outputs via Akamai's AI Firewall
- * service. Settings come from the policy options (configurationId, api-key,
- * applicationId, streamingAccumulation), and presence in the route's
- * `inbound[]` chain is what enables it.
- *
- * Options are validated at request time and invalid options fail closed with a
- * ConfigurationError. Detect-call failures (invalid credentials, rate limits,
- * outages) also fail closed by default, returning a 502 in the route's native
- * error format; set `onError: "allow"` to fail open and prioritize
- * availability over inspection.
- *
- * For streaming responses it uses a transform stream that can block content
- * mid-stream if harmful content is detected.
- *
- * Do not add this policy to the inbound chain of an app used as a Smart
- * Router classifier (`classifierAppID`). The firewall would inspect Smart
- * Router's internal classification call as if it were a completion request,
- * and Smart Router fails open on the resulting denial — so this is rejected
- * with a `ConfigurationError` rather than silently degrading classification.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function AkamaiAIFirewallV2InboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  unparsedOptions: unknown,
-  policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * The options for the Akamai AI Firewall policy.
- * @public
- */
-export declare interface AkamaiAIFirewallV2PolicyOptions {
-  configurationId: ConfigurationID_2;
-  "api-key": APIKey_3;
-  applicationId?: ApplicationID_2;
-  streamingAccumulation?: StreamingAccumulationSettings_2;
-  endpoints?: ApplicableEndpoints_4;
-  onUnknownShape?: OnUnknownShape_4;
-  onError?: OnFirewallError_2;
-}
-
 /**
  * Entry format for Akamai API Security logger
  * @public
@@ -2048,23 +1797,17 @@ export declare interface ApiAuthKeyInboundPolicyOptions {
 }
 
 /**
- * Credential used to run the classifier. Without `appId` this is the API key for the OpenAI-compatible service at `baseUrl`, and it is required. With `appId` it is optional: omit it when the classifier app runs the Ensure Gateway Internal Invocation Only policy, which authorizes the in-process invocation itself, and set it only when that app authenticates callers with API keys, in which case it is sent as `Authorization: Bearer`.
+ * The API key for the AI Firewall.
  * @public
  */
 declare type APIKey = string;
 
 /**
- * The API key for the AI Firewall.
+ * Credential used to run the classifier. Without `appId` this is the API key for the OpenAI-compatible service at `baseUrl`, and it is required. With `appId` it is optional: omit it when the classifier app runs the Ensure Gateway Internal Invocation Only policy, which authorizes the in-process invocation itself, and set it only when that app authenticates callers with API keys, in which case it is sent as `Authorization: Bearer`.
  * @public
  */
 declare type APIKey_2 = string;
 
-/**
- * The API key for the AI Firewall.
- * @public
- */
-declare type APIKey_3 = string;
-
 /**
  * Represents a consumer in the API Key service.
  * @public
@@ -2303,21 +2046,10 @@ declare type ApplicableEndpoints = (
 )[];
 
 /**
- * The endpoint shapes this policy applies to. Omit to apply to all (openai-chat, openai-responses, anthropic-messages).
- *
- * @minItems 1
- * @public
- */
-declare type ApplicableEndpoints_2 = [
-  "openai-chat" | "openai-responses" | "anthropic-messages",
-  ...("openai-chat" | "openai-responses" | "anthropic-messages")[],
-];
-
-/**
- * The endpoint shapes to cache. Defaults to all shapes: ['openai-chat', 'anthropic-messages', 'openai-responses'].
+ * The endpoint shapes this policy applies to. Omit to apply to all (openai-chat, openai-responses, anthropic-messages).
  * @public
  */
-declare type ApplicableEndpoints_3 = (
+declare type ApplicableEndpoints_2 = (
   | "openai-chat"
   | "openai-responses"
   | "anthropic-messages"
@@ -2327,7 +2059,7 @@ declare type ApplicableEndpoints_3 = (
  * The endpoint shapes this policy applies to. Omit to apply to all (openai-chat, openai-responses, anthropic-messages).
  * @public
  */
-declare type ApplicableEndpoints_4 = (
+declare type ApplicableEndpoints_3 = (
   | "openai-chat"
   | "openai-responses"
   | "anthropic-messages"
@@ -2337,7 +2069,7 @@ declare type ApplicableEndpoints_4 = (
  * The endpoint shapes this policy applies to. Omit to apply to all (openai-chat, openai-responses, anthropic-messages).
  * @public
  */
-declare type ApplicableEndpoints_5 = (
+declare type ApplicableEndpoints_4 = (
   | "openai-chat"
   | "openai-responses"
   | "anthropic-messages"
@@ -2345,6 +2077,17 @@ declare type ApplicableEndpoints_5 = (
 
 /**
  * The endpoint shapes this policy applies to. Omit to apply to all (openai-chat, openai-responses, anthropic-messages).
+ *
+ * @minItems 1
+ * @public
+ */
+declare type ApplicableEndpoints_5 = [
+  "openai-chat" | "openai-responses" | "anthropic-messages",
+  ...("openai-chat" | "openai-responses" | "anthropic-messages")[],
+];
+
+/**
+ * The endpoint shapes to cache. Defaults to all shapes: ['openai-chat', 'anthropic-messages', 'openai-responses'].
  * @public
  */
 declare type ApplicableEndpoints_6 = (
@@ -2359,12 +2102,6 @@ declare type ApplicableEndpoints_6 = (
  */
 declare type ApplicationID = string;
 
-/**
- * The application ID to identify this usage of the AI Firewall (optional).
- * @public
- */
-declare type ApplicationID_2 = string;
-
 /**
  * A list of attributes that will be included in the authorization request.
  * @public
@@ -4008,12 +3745,6 @@ declare interface ChatCompletionResponse {
  */
 declare type CheckIntervalMs = number;
 
-/**
- * Time interval in milliseconds for periodic checks (alternative to chunk count).
- * @public
- */
-declare type CheckIntervalMs_2 = number;
-
 /**
  * A light JSON-path selector into the authenticated user's claims (request.user.data). Use dot notation for nested claims, e.g. 'address.country'. Use bracket notation with quotes for claim names that contain dots or slashes — namespaced claims — e.g. ["https://sts.amazonaws.com/"]["lambda_source_function_arn"]; the two notations may be mixed. A missing claim always fails the check.
  * @public
@@ -4248,110 +3979,6 @@ export declare interface CognitoJwtInboundPolicyOptions {
   oAuthResourceMetadataEnabled?: boolean;
 }
 
-/**
- * Comet Opik Tracing Inbound Policy
- * @title Comet Opik Tracing
- * @product ai-gateway
- * @hidden
- *
- * This policy automatically handles tracing for both streaming and non-streaming
- * responses from AI Gateway. It creates traces when requests start and spans
- * when responses complete.
- *
- * For streaming responses, it clones the response stream and processes it in
- * the background using `waitUntil`, allowing the original stream to pass through
- * unmodified while still capturing the complete content for tracing.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function CometOpikTracingInboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: CometOpikTracingPolicyOptions,
-  policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * Track AI Gateway requests and responses using Comet Opik's LLM observability platform.
- * @public
- */
-export declare interface CometOpikTracingPolicyOptions {
-  /**
-   * The Comet Opik API key for authentication.
-   */
-  apiKey: string;
-  /**
-   * The Comet Opik project name for organizing traces.
-   */
-  projectName: string;
-  /**
-   * The Comet Opik workspace name.
-   */
-  workspace: string;
-  /**
-   * The base URL for the Comet Opik API (optional, defaults to https://www.comet.com/opik/api).
-   */
-  baseUrl?: string;
-}
-
-/**
- * Comet Opik Tracing Inbound Policy
- * @title Comet Opik Tracing
- * @product ai-gateway
- * @requiresAI
- *
- * Traces both streaming and non-streaming AI Gateway responses to Comet Opik,
- * creating traces when requests start and spans when responses complete.
- * Credentials (apiKey, projectName, workspace, baseUrl) come from the policy
- * options. The authenticated app configuration is used only to label the
- * model; presence in the route's chain is what enables the policy.
- *
- * For streaming responses, it clones the response stream and processes it in
- * the background using `waitUntil`, allowing the original stream to pass through
- * unmodified while still capturing the complete content for tracing.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function CometOpikTracingV2InboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: CometOpikTracingV2PolicyOptions,
-  _policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * Track AI Gateway requests and responses using Comet Opik's LLM observability platform.
- * @public
- */
-export declare interface CometOpikTracingV2PolicyOptions {
-  /**
-   * The Comet Opik API key for authentication.
-   */
-  apiKey: string;
-  /**
-   * The Comet Opik project name for organizing traces.
-   */
-  projectName: string;
-  /**
-   * The Comet Opik workspace name.
-   */
-  workspace: string;
-  /**
-   * The base URL for the Comet Opik API (optional, defaults to https://www.comet.com/opik/api).
-   */
-  baseUrl?: string;
-  endpoints?: ApplicableEndpoints_5;
-  onUnknownShape?: OnUnknownShape_5;
-}
-
 /**
  * The compatibility date on which to run the gateway
  */
@@ -4647,12 +4274,6 @@ export declare class ConfigurationError extends RuntimeError {
  */
 declare type ConfigurationID = string;
 
-/**
- * The configuration ID of the AI Firewall.
- * @public
- */
-declare type ConfigurationID_2 = string;
-
 /* Excluded from this release type: ContentTypes */
 
 /**
@@ -5617,12 +5238,6 @@ declare type EmbeddingsOverride =
  */
 declare type EnableStreamingAccumulation = boolean;
 
-/**
- * Enable accumulation and validation of streaming responses.
- * @public
- */
-declare type EnableStreamingAccumulation_2 = boolean;
-
 /**
  * @beta
  * Object exposing environment variables
@@ -5654,12 +5269,6 @@ export declare interface ErrorHandler {
  */
 declare type EventsInterval = number;
 
-/**
- * Number of SSE events to accumulate before checking with Akamai (default: 5).
- * @public
- */
-declare type EventsInterval_2 = number;
-
 declare const EventType: {
   readonly AI_GATEWAY_COST_SUM: "ai_gateway_cost_sum";
   readonly AI_GATEWAY_REQUEST_COUNT: "ai_gateway_request_count";
@@ -5892,111 +5501,6 @@ declare interface FunctionTool {
   description?: string | null;
 }
 
-/**
- * Galileo Tracing Inbound Policy
- * @title Galileo Tracing
- * @product ai-gateway
- * @hidden
- *
- * This policy automatically handles tracing for both streaming and non-streaming
- * responses from AI Gateway. It creates complete traces with workflow and LLM spans
- * when responses complete.
- *
- * For streaming responses, it clones the response stream and processes it in
- * the background using `waitUntil`, allowing the original stream to pass through
- * unmodified while still capturing the complete content for tracing.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function GalileoTracingInboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: GalileoTracingPolicyOptions,
-  policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * Track AI Gateway requests and responses using Galileo's LLM observability platform.
- * @public
- */
-export declare interface GalileoTracingPolicyOptions {
-  /**
-   * The Galileo API key for authentication.
-   */
-  apiKey: string;
-  /**
-   * The Galileo project ID (UUID) for organizing traces.
-   */
-  projectId: string;
-  /**
-   * The Galileo log stream ID (UUID) for organizing traces.
-   */
-  logStreamId: string;
-  /**
-   * The base URL for the Galileo API (optional, defaults to https://api.galileo.ai).
-   */
-  baseUrl?: string;
-}
-
-/**
- * Galileo Tracing Inbound Policy
- * @title Galileo Tracing
- * @product ai-gateway
- * @requiresAI
- *
- * Traces both streaming and non-streaming AI Gateway responses to Galileo's LLM
- * observability platform, creating complete traces with workflow and LLM spans
- * when responses complete. Credentials (apiKey, projectId, logStreamId, baseUrl)
- * come from the policy options. The authenticated app configuration is used
- * only to label the model; presence in the route's chain is what enables the
- * policy.
- *
- * For streaming responses, it clones the response stream and processes it in
- * the background using `waitUntil`, allowing the original stream to pass through
- * unmodified while still capturing the complete content for tracing.
- *
- * @param request - The ZuploRequest
- * @param context - The ZuploContext
- * @param options - The policy options set in policies.json
- * @param policyName - The name of the policy as set in policies.json
- * @returns A Request or a Response
- */
-export declare function GalileoTracingV2InboundPolicy(
-  request: ZuploRequest,
-  context: ZuploContext,
-  options: GalileoTracingV2PolicyOptions,
-  _policyName: string
-): Promise<ZuploRequest | Response>;
-
-/**
- * Track AI Gateway requests and responses using Galileo's LLM observability platform.
- * @public
- */
-export declare interface GalileoTracingV2PolicyOptions {
-  /**
-   * The Galileo API key for authentication.
-   */
-  apiKey: string;
-  /**
-   * The Galileo project ID (UUID) for organizing traces.
-   */
-  projectId: string;
-  /**
-   * The Galileo log stream ID (UUID) for organizing traces.
-   */
-  logStreamId: string;
-  /**
-   * The base URL for the Galileo API (optional, defaults to https://api.galileo.ai).
-   */
-  baseUrl?: string;
-  endpoints?: ApplicableEndpoints_6;
-  onUnknownShape?: OnUnknownShape_6;
-}
-
 /**
  * Function to generate request logger entries
  * @public
@@ -11532,17 +11036,11 @@ declare type OnClassifierError = "block" | "allow";
  */
 declare type OnEngineError = "block" | "allow";
 
-/**
- * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection. An onError value in the AI Gateway app configuration takes precedence over this option.
- * @public
- */
-declare type OnFirewallError = "block" | "allow";
-
 /**
  * What to do when the Akamai detect call itself fails (invalid API key, rate limit, outage). 'block' (the default) fails closed and returns a 502 so unverified content is never served; 'allow' fails open and lets the request through without inspection.
  * @public
  */
-declare type OnFirewallError_2 = "block" | "allow";
+declare type OnFirewallError = "block" | "allow";
 
 /**
  * @public
@@ -11590,37 +11088,37 @@ declare interface OnSendingAwsLambdaEventHook {
 }
 
 /**
- * What to do when the request shape cannot be inspected. As a guardrail this policy defaults to `deny` (fail closed) so uninspectable content is never served.
+ * What to do when the request shape cannot be inspected. As a guardrail, this policy defaults to 'deny' (fail closed) so uninspectable content is never served.
  * @public
  */
 declare type OnUnknownShape = "deny" | "skip";
 
 /**
- * What to do when the request shape cannot be inspected. As a guardrail, this policy defaults to 'deny' (fail closed) so uninspectable content is never forwarded.
+ * What to do when the request shape cannot be inspected. As a guardrail this policy defaults to `deny` (fail closed) so uninspectable content is never served.
  * @public
  */
 declare type OnUnknownShape_2 = "deny" | "skip";
 
 /**
- * Unused by the cache (a cache miss is never unsafe, so it always fails open). Present for interface consistency.
+ * What to do on a shape the policy cannot read. As an observer this defaults to 'skip' (fail open — pass through untraced).
  * @public
  */
 declare type OnUnknownShape_3 = "deny" | "skip";
 
 /**
- * What to do when the request shape cannot be inspected. As a guardrail, this policy defaults to 'deny' (fail closed) so uninspectable content is never served.
+ * What to do on a shape the policy cannot read. As an observer this defaults to 'skip' (fail open — pass through untraced).
  * @public
  */
 declare type OnUnknownShape_4 = "deny" | "skip";
 
 /**
- * What to do on a shape the policy cannot read. As an observer this defaults to 'skip' (fail open — pass through untraced).
+ * What to do when the request shape cannot be inspected. As a guardrail, this policy defaults to 'deny' (fail closed) so uninspectable content is never forwarded.
  * @public
  */
 declare type OnUnknownShape_5 = "deny" | "skip";
 
 /**
- * What to do on a shape the policy cannot read. As an observer this defaults to 'skip' (fail open — pass through untraced).
+ * Unused by the cache (a cache miss is never unsafe, so it always fails open). Present for interface consistency.
  * @public
  */
 declare type OnUnknownShape_6 = "deny" | "skip";
@@ -14740,16 +14238,6 @@ declare interface StreamingAccumulationSettings {
   checkIntervalMs?: CheckIntervalMs;
 }
 
-/**
- * Configuration for accumulating and validating streaming responses.
- * @public
- */
-declare interface StreamingAccumulationSettings_2 {
-  enabled?: EnableStreamingAccumulation_2;
-  eventsInterval?: EventsInterval_2;
-  checkIntervalMs?: CheckIntervalMs_2;
-}
-
 /**
  * A specialized zone cache for storing and retrieving ReadableStreams.
  * Unlike regular ZoneCache which serializes to JSON, this cache stores raw stream data,