@zuplo/runtime 7.8.24 → 7.9.2

package/out/esm/mocks/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{E as p,J as c,M as u}from"../chunk-7NJIR6WX.js";import"../chunk-54HRCPVQ.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import"../chunk-6O4OZCO6.js";import{aa as i}from"../chunk-MWIJG5KC.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
+import{E as p,J as c,M as u}from"../chunk-A7E4OVWK.js";import"../chunk-54HRCPVQ.js";import{a as d}from"../chunk-QGAJTUPE.js";import"../chunk-A3QGJZO7.js";import"../chunk-6O4OZCO6.js";import{aa as i}from"../chunk-MWIJG5KC.js";import{a as o}from"../chunk-TYV53J3B.js";function w(l={request:new Request("https://api.example.com")}){let e=[];function t(s){e.push(Promise.resolve(s))}return o(t,"waitUntil"),{context:new a({event:{waitUntil:t},route:l.route,originalRequest:l.request}),invokeResponse:o(async()=>{await Promise.all(e)},"invokeResponse")}}o(w,"createMockContext");var g={path:"/",methods:["GET"],handler:{module:{},export:"default"},raw:o(()=>({}),"raw")},a=class extends EventTarget{static{o(this,"MockZuploContext")}#e;#t;contextId;requestId;log;route;custom;incomingRequestProperties;parentContext;analyticsContext;constructor({event:e,route:t=g,parentContext:n,originalRequest:r}){super(),this.requestId=crypto.randomUUID(),this.contextId=crypto.randomUUID(),this.log={info:i.console.info,log:i.console.log,debug:i.console.debug,warn:i.console.warn,error:i.console.error,setLogProperties:o(()=>{},"setLogProperties")},this.custom={},this.route=t,this.incomingRequestProperties={ip:"203.0.113.7",asn:1234,asOrganization:"ORGANIZATION",city:"Seattle",region:"Washington",regionCode:"WA",colo:"SEA",continent:"NA",country:"US",postalCode:"98004",metroCode:"SEA",latitude:void 0,longitude:void 0,timezone:void 0,httpProtocol:void 0,clientCert:void 0,clientMtlsVerificationStatus:void 0,clientMtlsVerificationReason:void 0,clientCertFingerprintSha256:void 0,clientCertNotBefore:void 0,clientCertNotAfter:void 0,clientCertIssuerDn:void 0,clientCertSubjectDn:void 0},this.parentContext=n,this.#e=e,this.#t=r,this.analyticsContext=new c(this.requestId)}waitUntil(e){this.#e.waitUntil(e)}invokeInboundPolicy(e,t){throw new Error("Not implemented")}invokeOutboundPolicy(e,t,n){throw new Error("Not implemented")}invokeRoute(e,t){throw new Error("Not implemented")}addResponseSendingHook(e){throw new Error("Not implemented")}addResponseSendingFinalHook(e){throw new Error("Not implemented")}addPreRequestHandler(e,t){let n;try{n=u.getContextExtensions(this)}catch{n=u.initialize(this,new d(this.#t??new Request("https://api.example.com")))}n.preRequestPhase??="active",p(this,n,e,t)}get preRequestHandlers(){let e;try{e=u.getContextExtensions(this)}catch{return[]}return(e.preRequestState?.entries??[]).map(t=>({policyName:t.policyName,name:t.name}))}addEventListener(e,t,n){let r=o(s=>{try{typeof t=="function"?t(s):t.handleEvent(s)}catch(m){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),m}},"wrapped");super.addEventListener(e,r,n)}};export{a as MockZuploContext,w as createMockContext};
 //# sourceMappingURL=index.js.map

package/out/types/index.d.ts

@@ -41,7 +41,7 @@ export declare type AiFormat =
  * mid-stream if harmful content is detected.
  *
  * Do not add this policy to the inbound chain of an app used as a Smart
- * Router classifier (`classifierAppID`). The firewall would inspect Smart
+ * Router classifier (`classifier.app`). The firewall would inspect Smart
  * Router's internal classification call as if it were a completion request,
  * and Smart Router fails open on the resulting denial — so this is rejected
  * with a `ConfigurationError` rather than silently degrading classification.
@@ -204,7 +204,7 @@ export declare type AIGatewayCapability =
  * gateway root.
  *
  * Place this policy on AI Gateway routes after optional authentication and
- * optional `ai-gateway-configuration-loader-v2-inbound`. When either of those
+ * optional `ai-gateway-configuration-loader-inbound`. When either of those
  * already populated the app-configuration channel, this policy reuses it.
  * Otherwise it loads the configuration with the route's `app_id` path
  * parameter. Applications select from policies pre-declared by the gateway.
@@ -246,7 +246,7 @@ export { AIGatewayConfigurationExecutorInboundPolicy as AIGatewayConfigurationEx
  */
 declare interface AIGatewayConfigurationExecutorInboundPolicyOptions {
   /**
-   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. This cache is only used when neither ai-gateway-auth-v2-inbound nor ai-gateway-configuration-loader-v2-inbound already loaded the configuration for the request.
+   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. This cache is only used when neither ai-gateway-auth-inbound nor ai-gateway-configuration-loader-inbound already loaded the configuration for the request.
    */
   cacheTtlSeconds?: number;
 }
@@ -258,8 +258,8 @@ export { AIGatewayConfigurationExecutorInboundPolicyOptions as AIGatewayConfigur
  * request-scoped channel and does nothing else.
  *
  * Place this policy on AI Gateway routes before
- * `ai-gateway-configuration-executor-v2-inbound` when you want configuration
- * loading separated from chain execution. When `ai-gateway-auth-v2-inbound`
+ * `ai-gateway-configuration-executor-inbound` when you want configuration
+ * loading separated from chain execution. When `ai-gateway-auth-inbound`
  * already populated the channel, this policy reuses it. Otherwise it loads
  * the configuration with the route's `app_id` path parameter.
  *
@@ -291,7 +291,7 @@ export { AIGatewayConfigurationLoaderInboundPolicy as AIGatewayConfigurationLoad
  */
 declare interface AIGatewayConfigurationLoaderInboundPolicyOptions {
   /**
-   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. When ai-gateway-auth-v2-inbound already loaded the configuration for the request, this cache is not used.
+   * The time in seconds to cache app configurations loaded by app_id. Defaults to 10 seconds when omitted. Higher values decrease latency; lower values pick up portal changes sooner. Cached results remain valid until the cache expires even if the configuration changes in the portal. When ai-gateway-auth-inbound already loaded the configuration for the request, this cache is not used.
    */
   cacheTtlSeconds?: number;
 }
@@ -1203,17 +1203,20 @@ export declare type AIGatewaySmartRouterComplexity = "low" | "medium" | "high";
  * @product ai-gateway
  * @requiresAI
  *
- * Classifies the last user prompt by calling a dedicated classifier AI
- * Gateway app, stores the result on `AIGatewaySmartRouter`, and
- * optionally overwrites completions routing from `modelsByComplexity`.
- * Classification failures, timeouts, and invalid options fail open: the
- * original request is forwarded.
- *
- * `classifierAppID` must not be this app's own id, and the classifier app it
- * names must not run this policy itself. Both are rejected with a
- * `ConfigurationError` — thrown, not logged and failed open like every other
- * classifier failure — so a misconfigured routing loop is never mistaken for
- * smart routing that is simply doing nothing.
+ * Classifies the last user prompt with the classifier set in `classifier` —
+ * another AI Gateway app, an OpenAI-compatible Chat Completions API, or Jev
+ * from TypeSafe — stores the result on `AIGatewaySmartRouter`, and optionally
+ * overwrites completions routing from `modelsByComplexity`. Classification
+ * failures, timeouts, and incomplete options fail open: the original request
+ * is forwarded.
+ *
+ * Some misconfigurations are rejected with a `ConfigurationError` — thrown,
+ * not logged and failed open like every other classifier failure — because
+ * failing open on them would look like smart routing that is simply doing
+ * nothing: more than one classifier, a deprecated `classifierAppID`-style
+ * option beside `classifier`, or `classifierPrompt` with Jev; a
+ * `classifier.app.appId` that is this app's own id; and a classifier app that
+ * runs this policy itself.
  *
  * @param request - The ZuploRequest
  * @param context - The ZuploContext
@@ -1229,25 +1232,30 @@ export declare function AIGatewaySmartRouterInboundPolicy(
 ): Promise<ZuploRequest | Response>;
 
 /**
- * Options for the Smart Router policy: classify the last user prompt with a dedicated classifier AI Gateway app, then optionally route by complexity.
+ * Options for the Smart Router policy: classify the last user prompt with an AI Gateway app, a Chat Completions API, or Jev, then optionally route by complexity.
  * @public
  */
 export declare interface AIGatewaySmartRouterInboundPolicyOptions {
-  classifierAppID: ClassifierAppID_2;
-  classifierModel: ClassifierModel_2;
+  classifier?: Classifier;
   modelsByComplexity: ModelsByComplexity;
-  classifierAppApiKey?: ClassifierAppAPIKey;
   smartRoutingEnabled?: SmartRoutingEnabled;
   intents?: Intents;
   classifierPrompt?: ClassifierPrompt_2;
   minConfidenceForRouting?: MinimumConfidenceForRouting;
   classifierTimeoutMs?: ClassifierTimeoutMs_2;
   maxPromptChars?: MaxPromptCharacters;
+  classifierAppID?: ClassifierAppIDDeprecated;
+  classifierModel?: ClassifierModelDeprecated;
+  classifierAppApiKey?: ClassifierAppAPIKeyDeprecated;
 }
 
 /**
  * Structured classification of the last user prompt.
  *
+ * With the Jev classifier, `confidence` is the lower of Jev's confidence in
+ * the intent and in the complexity, and `reasons` is empty: Jev answers typed
+ * questions and writes no reasons.
+ *
  * @public
  */
 export declare interface AIGatewaySmartRouterProfile {
@@ -1311,7 +1319,9 @@ export declare interface AIGatewaySmartRouterRoutingDecision {
 }
 
 /**
- * Classifier token usage reported by the classifier chat/completions call.
+ * Classifier token usage reported by the classifier call. For Jev,
+ * `promptTokens` and `completionTokens` are the input and output tokens that
+ * the Jev API reports.
  *
  * @public
  */
@@ -3739,6 +3749,34 @@ declare interface ChatCompletionResponse {
   provider?: string;
 }
 
+/**
+ * Classify by calling an OpenAI-compatible Chat Completions API directly, outside the gateway. The model must support structured outputs (`response_format` with a JSON schema).
+ * @public
+ */
+declare interface ChatCompletionsAPI {
+  apiKey: ChatCompletionsAPIKey;
+  model: ChatCompletionsModel;
+  baseUrl?: ChatCompletionsBaseURL;
+}
+
+/**
+ * API key for the service at `baseUrl`, sent as `Authorization: Bearer`.
+ * @public
+ */
+declare type ChatCompletionsAPIKey = string;
+
+/**
+ * Base URL of the OpenAI-compatible API. The classifier request is sent to `{baseUrl}/chat/completions`.
+ * @public
+ */
+declare type ChatCompletionsBaseURL = string;
+
+/**
+ * The model id the service expects, such as `gpt-4o-mini`. This is sent to the service as-is, not as a `providerName/model` reference.
+ * @public
+ */
+declare type ChatCompletionsModel = string;
+
 /**
  * Time interval in milliseconds for periodic checks (alternative to chunk count).
  * @public
@@ -3757,12 +3795,38 @@ declare type Claim = string;
  */
 declare type ClaimCheck = EqualsRule | InRule | StartsWithRule;
 
+/**
+ * Where the user's prompt is classified. Required unless the deprecated `classifierAppID` and `classifierModel` are set. Set exactly one of `app`, `chatCompletions`, or `jev`; setting more than one is a configuration error.
+ * @public
+ */
+declare interface Classifier {
+  app?: ClassifierApp;
+  chatCompletions?: ChatCompletionsAPI;
+  jev?: JevTypeSafe;
+}
+
+/**
+ * Classify with another AI Gateway app in this project. The call runs in-process and never leaves the gateway, so the classifier uses that app's providers, routing, and quotas.
+ * @public
+ */
+declare interface ClassifierApp {
+  appId: ClassifierAppID_2;
+  model: ClassifierModel_2;
+  apiKey?: ClassifierAppAPIKey;
+}
+
 /**
  * API key sent as `Authorization: Bearer` when invoking the classifier app. Omit it when the classifier app runs the Ensure Gateway Internal Invocation Only policy: the classifier call never leaves the gateway, so that policy accepts it and rejects everything arriving over the network, and no credential is sent. Set it only when the classifier app authenticates callers with API keys.
  * @public
  */
 declare type ClassifierAppAPIKey = string;
 
+/**
+ * **Deprecated**: use `classifier.app.apiKey` instead. Still honored when `classifier` is not set; setting both is a configuration error.
+ * @public
+ */
+declare type ClassifierAppAPIKeyDeprecated = string;
+
 /**
  * Run the classifier on another AI Gateway app instead of calling an external API directly. The gateway invokes that app in-process — no outbound HTTP hop — so the classifier inherits its provider credentials, model routing, fallbacks and quotas, and provider keys stay on one app. Give that app the Ensure Gateway Internal Invocation Only policy and `apiKey` is not needed at all. When set, `model` must name a routed model as `provider/model` and `baseUrl` must not be set. The target app must not itself run this policy: it would be asked to classify its own classification request, which is rejected as a configuration error rather than silently skipped. Omit to call `baseUrl` directly.
  * @public
@@ -3770,11 +3834,17 @@ declare type ClassifierAppAPIKey = string;
 declare type ClassifierAppID = string;
 
 /**
- * The AI Gateway application id used to run the classifier prompt and evaluate the user's request.
+ * The id of the AI Gateway app that runs the classifier. It must not be this app, and that app must not run this policy.
  * @public
  */
 declare type ClassifierAppID_2 = string;
 
+/**
+ * **Deprecated**: use `classifier.app.appId` instead. Still honored when `classifier` is not set; setting both is a configuration error.
+ * @public
+ */
+declare type ClassifierAppIDDeprecated = string;
+
 /**
  * Tool-calling capable model used to classify prompts. Prefer a small, fast model; the classification runs before every inspected request reaches the upstream model. With `appId` set this must name a model the classifier app routes, written as `provider/model` (for example `openai/gpt-4o-mini`), and has no default.
  * @public
@@ -3782,11 +3852,17 @@ declare type ClassifierAppID_2 = string;
 declare type ClassifierModel = string;
 
 /**
- * The model (`providerName/model`) the classifier uses to evaluate the user's request. E.g. `openai/gpt-4o-mini`.
+ * The model (`providerName/model`) the classifier app uses to evaluate the user's request. E.g. `openai/gpt-4o-mini`.
  * @public
  */
 declare type ClassifierModel_2 = string;
 
+/**
+ * **Deprecated**: use `classifier.app.model` instead. Still honored when `classifier` is not set; setting both is a configuration error.
+ * @public
+ */
+declare type ClassifierModelDeprecated = string;
+
 /**
  * Replaces the built-in system prompt that tells the classifier what counts as a prompt injection. A string, or an array of lines joined with newlines. The inspected text is always sent as a separate user message and the verdict always comes back through the fixed SAFE/UNSAFE tool call, so a custom prompt changes what is flagged, never how the verdict is read. Omit to use the built-in prompt, which the policy documentation shows in full.
  * @public
@@ -3794,7 +3870,7 @@ declare type ClassifierModel_2 = string;
 declare type ClassifierPrompt = string | [string, ...string[]];
 
 /**
- * Prompt used to analyze and classify the user message. Omit to use the built-in classifier prompt.
+ * Prompt used to analyze and classify the user message with `classifier.app` or `classifier.chatCompletions`. Omit to use the built-in classifier prompt. Jev takes no prompt, so setting this with `classifier.jev` is a configuration error.
  * @public
  */
 declare type ClassifierPrompt_2 = string | [string, ...string[]];
@@ -8052,6 +8128,34 @@ declare type Iso3166Alpha2Code =
   | "ZM"
   | "ZW";
 
+/**
+ * API key for the service at `baseUrl`, sent as `Authorization: Bearer`: a TypeSafe key by default, or an OpenRouter key when `baseUrl` is OpenRouter.
+ * @public
+ */
+declare type JevAPIKey = string;
+
+/**
+ * API root of the System One API that serves Jev, the same value the TypeSafe SDK's `baseURL` takes. The classifier request is sent to `{baseUrl}/v1/systemone`. Set it to `https://openrouter.ai/api` to call Jev through OpenRouter.
+ * @public
+ */
+declare type JevBaseURL = string;
+
+/**
+ * The Jev model to call. `jev-latest` follows the newest stable release on both TypeSafe and OpenRouter. Pin a versioned id to keep answers stable after tuning `minConfidenceForRouting`: `jev-1.13.0` on TypeSafe, or `jev-1.13` on OpenRouter.
+ * @public
+ */
+declare type JevModel = string;
+
+/**
+ * Classify with Jev, TypeSafe's classification model, by calling a System One API directly: TypeSafe's by default, or another host such as OpenRouter through `baseUrl`. Jev answers typed questions instead of generating text, so it takes no `classifierPrompt`.
+ * @public
+ */
+declare interface JevTypeSafe {
+  apiKey: JevAPIKey;
+  model?: JevModel;
+  baseUrl?: JevBaseURL;
+}
+
 declare type JsonArray = JsonValue[] | readonly JsonValue[];
 
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.8.24",
+  "version": "7.9.2",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {