zuplo 7.6.4 → 7.6.6

package/docs/ai-gateway/getting-started.mdx

@@ -2,13 +2,13 @@
 title: Zuplo AI Gateway Getting Started
 sidebar_label: Getting Started
 description:
-  Set up your first AI Gateway project. Connect a Git repository, configure an
-  AI provider, create a team and an app, review the app's policy chain, and make
-  your first LLM request through Zuplo.
+  Set up your first AI Gateway project. Configure an AI provider, create a team
+  and an app, review the app's policy chain, and make your first LLM request
+  through Zuplo.
 ---
 
 This guide walks you through setting up your first AI Gateway project, from
-connecting a Git repository to making your first LLM request through Zuplo.
+creating the project to making your first LLM request through Zuplo.
 
 A Zuplo account contains your members and one or more projects. The AI Gateway
 you create in this guide is a Zuplo project; its providers, teams, and apps all
@@ -19,7 +19,6 @@ account, Zuplo project, and AI Gateway team roles control access.
 ## Prerequisites
 
 - A Zuplo account (sign up free at [zuplo.com](https://zuplo.com))
-- A Git provider account that can create repositories (this guide uses GitHub)
 - An API key for at least one LLM provider (OpenAI, Anthropic, Google, Mistral,
   xAI, etc.)—or none at all, if you start with the free
   [Zuplo Demo provider](./providers.mdx#zuplo-demo)
@@ -28,52 +27,32 @@ account, Zuplo project, and AI Gateway team roles control access.
 
 1. **Create an AI Gateway project**
 
-   Log into the [Zuplo Portal](https://portal.zuplo.com), navigate to
-   **Projects**, and click **New Project**. Choose **Configure an AI gateway**,
-   give your project a name (for example, "MyCompany AI Gateway"), and click
-   **Create Project**.
+   Sign in to the [Zuplo Portal](https://portal.zuplo.com), navigate to
+   **Projects**, and click **New Project**. Choose **AI Gateway**, give your
+   project a name (for example, "MyCompany AI Gateway"), and click **Create
+   Project**.
 
-2. **Connect the project to a Git repository**
-
-   Your AI Gateway deploys from source control, so the first step after creating
-   the project is connecting it to a repository. The project shows a **Let's Get
-   You Deployed** screen until a repository is connected.
-
-   Zuplo supports GitHub, GitLab, Bitbucket, and Azure DevOps. This guide uses
-   GitHub, which is the only provider with automatic deployments—see
-   [Source Control and Deployment](../concepts/source-control-and-deployment.mdx)
-   for the other providers, which deploy through the Zuplo CLI in your own CI/CD
-   pipeline.
-
-   With GitHub, click **Create New Repo** to open GitHub with the repository
-   name prefilled, create the repository, then return to the Zuplo Portal and
-   select the repository to connect it. Zuplo adds the gateway's source to the
-   repository and deploys it. After that, pushes to your default branch deploy
-   to production.
-
-   To work with the gateway's source later—for example, to add
-   [custom policies](./custom-policies.mdx)—clone the repository:
-
-   ```bash
-   git clone https://github.com/your-org/your-gateway-repo.git
-   ```
+   The portal shows **Setting up your gateway…** while it provisions the
+   project. When that's done, the project homepage opens with a setup checklist
+   for a provider, a team, and an app—the same path as this guide. Follow these
+   steps; you can tick the checklist as you go or ignore it. The gateway is
+   already deployed, so you can continue with this guide.
 
    :::note
 
-   If your default branch requires pull requests, Zuplo pushes the gateway
-   source to a setup branch and shows you a pull request to merge. The project
-   finishes connecting once the pull request lands on the default branch.
+   Connect a repository later if you want to write
+   [custom policies](./custom-policies.mdx) or manage the gateway's source in
+   Git. Open
+   [**Settings → Source Control**](https://portal.zuplo.com/+/account/project/ai/settings/source-control).
+   See [Source Control](./source-control.mdx).
 
    :::
 
-   See [Source Control](./source-control.mdx) for what the repository contains
-   and how deployments work.
-
-3. **Configure a provider**
+2. **Configure a provider**
 
-   Providers are the LLM services (like OpenAI or Anthropic) that your apps use.
-   You configure these once as an administrator, and your team members use them
-   without needing direct access to provider API keys.
+   Providers are the LLM services (such as OpenAI or Anthropic) that your apps
+   use. You configure these once as an administrator, and your team members use
+   them without needing direct access to provider API keys.
 
    Open
    [**Settings → AI Providers**](https://portal.zuplo.com/+/account/project/ai/settings/data-models)
@@ -96,21 +75,23 @@ account, Zuplo project, and AI Gateway team roles control access.
    full list of supported providers, including OpenAI-compatible custom
    providers.
 
-4. **Create a team**
+3. **Create a team**
 
-   Teams organize users and carry hierarchical budget controls and policy
-   templates. Even if you're starting solo, you need at least one team.
+   Teams organize users and carry their own budget rules and policy templates.
+   Even if you're starting solo, you need at least one team.
 
    Open the **Apps & Teams** tab and click **New Team**. Name your team (for
    example, "Root" or your company name), choose an icon, and click **Create
    Team**. This is your first team, so there's no parent picker yet—it appears
-   on later teams, letting you nest them. To set gateway-wide spending limits
-   across this Zuplo project, open the gateway's **Settings → Usage Limits**;
-   for team-specific limits, use the team's **Usage & Limits** tab. See
+   on later teams, letting you nest them.
+
+   To set gateway-wide spending limits across this Zuplo project, open the
+   gateway's **Settings → Usage Limits**. Team budgets—shared and
+   per-expression—are set on the team's **Usage & Limits** tab. See
    [Usage Limits](./usage-limits.mdx). Gateway and team limits apply to every
    app regardless of its policy chain.
 
-5. **Create an app**
+4. **Create an app**
 
    Apps represent individual software applications or services that call the AI
    Gateway. Each app gets its own unique URL and API key.
@@ -129,7 +110,7 @@ account, Zuplo project, and AI Gateway team roles control access.
 
    :::
 
-6. **Review the app's policy chain**
+5. **Review the app's policy chain**
 
    The portal opens the app's **Policies** tab, which shows the app's policy
    chain—the ordered list of policies that run on each request. No policy is
@@ -137,15 +118,17 @@ account, Zuplo project, and AI Gateway team roles control access.
    picks its own model as `providerName/model`, from any model your providers
    expose.
 
-   To restrict that, add the **Model Filtering** policy and give it an allow
-   list such as `openai/gpt-5-mini`. Requests may then use only listed models,
-   and the first entry becomes the default when a request omits `model`.
+   To restrict that, click **Add policy**, select **Model Filtering**, and give
+   it an allow list of models you enabled in the provider step—for example
+   `openai/gpt-5-mini` if you added OpenAI, or `zuplodemo/pirate` if you are
+   using only Zuplo Demo. Requests may then use only listed models, and the
+   first entry becomes the default when a request omits `model`.
 
    :::caution{title="An unrestricted app can reach every model you configured"}
 
    Without Model Filtering, an app may call any model available through the
    providers configured for this Zuplo project, including expensive ones. Add
-   Model Filtering for any app that should be limited to a specific set.
+   Model Filtering for any app that you want limited to a specific set.
 
    :::
 
@@ -153,7 +136,7 @@ account, Zuplo project, and AI Gateway team roles control access.
    guardrails, and any custom policies. Changes to the chain apply within about
    a minute—no redeploy needed. See [Policy Chains](./policy-chains.mdx).
 
-7. **Get the app's URL and API key**
+6. **Get the app's URL and API key**
 
    The app's **API URL** is shown in full at the top of the app page, and its
    key lives on the app's **API Key** tab. The API URL is the gateway's hostname
@@ -190,12 +173,12 @@ account, Zuplo project, and AI Gateway team roles control access.
    export ZUPLO_APP_API_KEY="<the API key from the app page>"
    ```
 
-8. **Send your first request from the Playground**
+7. **Send your first request from the Playground**
 
    Click **Playground** in the app's header to open it. It chats with the app's
    own gateway URL and API key, so it exercises the same policy chain your code
-   will hit—without wiring up a client first. The button sits on every app tab,
-   so you can try a request while editing policies without losing your place.
+   hits—without wiring up a client first. The button sits on every app tab, so
+   you can try a request while editing policies without losing your place.
 
    Pick a model from the selector, optionally set a system prompt, and send a
    message. The playground shows the cURL for the next request, and **Copy
@@ -205,6 +188,9 @@ account, Zuplo project, and AI Gateway team roles control access.
 
 </Stepper>
 
+You now have a working AI Gateway: a provider, a team, an app, and a chat
+completion through the app's URL.
+
 ## Integrate with your own code
 
 Once the Playground works, configure your own code with the same URL and key.
@@ -221,7 +207,7 @@ for the [OpenAI SDK](./integrations/openai.mdx),
 ```javascript
 import OpenAI from "openai";
 
-// Old approach - directly calling OpenAI
+// Direct OpenAI
 const openai = new OpenAI({
   apiKey: process.env.OPENAI_API_KEY,
 });
@@ -239,11 +225,10 @@ console.log(completion.choices[0].message.content);
 ```javascript
 import OpenAI from "openai";
 
-// New approach - using Zuplo AI Gateway
+// Through the AI Gateway
 const openai = new OpenAI({
   apiKey: process.env.ZUPLO_APP_API_KEY,
-  baseURL:
-    "https://my-gateway-main-2e18f50.zuplo.app/config_fe0a04972d2848e0a94ae4b8bcd1497e/v1",
+  baseURL: process.env.ZUPLO_APP_BASE_URL,
 });
 
 const completion = await openai.chat.completions.create({
@@ -256,7 +241,7 @@ console.log(completion.choices[0].message.content);
 
 Run the example with `node sample.mjs`.
 
-### What changed?
+### Changes to make
 
 1. **URL**: Replace your provider's URL with your app's gateway URL from the app
    page
@@ -296,8 +281,7 @@ curl https://my-gateway-main-2e18f50.zuplo.app/config_fe0a04972d2848e0a94ae4b8bc
 4. Click **View in Analytics** on the Metrics frame for the full request-level
    breakdown, already filtered to this app.
 
-You should see your test request appear with token usage and performance
-metrics.
+Your test request appears with token usage and performance metrics.
 
 ## Next steps
 
@@ -305,6 +289,8 @@ metrics.
   caching, and guardrails to your app's chain
 - [Custom Policies](./custom-policies.mdx): write your own policy and add it to
   an app's chain
+- [Source Control](./source-control.mdx): connect a Git repository when you want
+  to edit the gateway's source or write custom policies
 - [Policy Templates](./policy-templates.mdx): give every new app in a team a
   consistent starting chain
 - [Usage Limits](./usage-limits.mdx): set spending limits for the gateway,

package/docs/ai-gateway/managing-teams.mdx

@@ -41,8 +41,9 @@ After creating a team, use its tabs to configure it:
 
 - **Policy Template**—the team's [policy template](./policy-templates.mdx), the
   starting policy chain for apps created in the team.
-- **Usage & Limits**—spending limits that apply to all of the team's apps
-  combined. See [Usage Limits](./usage-limits.mdx).
+- **Usage & Limits**—the team's budgets, shared and per-expression, applying to
+  the team, its sub-teams, and their apps. See
+  [Usage Limits](./usage-limits.mdx).
 - **Members**—who belongs to the team.
 
 ## Adding Team Members

package/docs/ai-gateway/overview.mdx

@@ -2,9 +2,9 @@
 title: AI Gateway overview
 sidebar_label: Overview
 description:
-  The Zuplo AI Gateway is a proxy between your apps and LLM providers, deployed
-  from your own Git repository, with per-app policy pipelines for cost control,
-  model access, guardrails, and observability.
+  The Zuplo AI Gateway is a proxy between your apps and LLM providers, with
+  per-app policy pipelines for cost control, model access, guardrails, and
+  observability.
 ---
 
 Zuplo's AI Gateway acts as an intelligent proxy layer that sits between your
@@ -30,9 +30,9 @@ Google, Mistral, xAI, and more) dynamically without modifying app code.
 Configure model access through the gateway rather than hard coding it into your
 apps.
 
-**Cost Control**: Set spending limits at gateway, team, and app levels with
-hierarchical budgets that cascade down through your structure. Configure daily
-and monthly thresholds with enforcement or warning notifications.
+**Cost Control**: Set independent spending limits at the gateway, team, and app
+levels. Configure hourly, daily, weekly, or monthly rules that warn or block
+when usage reaches a limit.
 
 **Security & Compliance**: Apply guardrails to detect and block prompt injection
 attempts and prevent PII leakage in both requests and responses through
@@ -84,10 +84,11 @@ capabilities. Apps reference models as `providerName/model`—for example
 
 ### Source-Controlled Gateway
 
-Every AI Gateway project connects to a Git repository that contains the
-gateway's routes and policy declarations. The default branch is what production
-runs, so gateway changes go through your normal review workflow. See
-[Source Control](./source-control.mdx).
+A new AI Gateway project deploys without a Git repository, so you can configure
+providers, teams, and apps right away. Connect a
+[Git repository](./source-control.mdx) when you want to write custom policies or
+review gateway changes in Git. After you connect, the default branch is what
+production runs.
 
 ### Per-App Policy Chains
 
@@ -99,13 +100,14 @@ a consistent starting pipeline. See [Policy Chains](./policy-chains.mdx) and
 
 ### Team Hierarchy & Budgets
 
-Organize users into teams with hierarchical structures. Set budget limits at
-each level that cascade down:
+Organize users into teams with hierarchical structures. Set a budget at each
+node. Each node totals its own usage and all descendant usage, and any exceeded
+**Block** limit rejects the request:
 
-- **Gateway**: Limits across the Zuplo project (for example, $1,000/day)
-- **Teams**: Team-specific limits that can't exceed parent limits (for example,
-  $500/day for the Credit Team)
-- **Apps**: Per-app limits for granular control
+- **Gateway**: Limits across the Zuplo project (for example, $1,000/day).
+- **Teams**: Limits across the team, its sub-teams, and their apps (for example,
+  $500/day for the Credit Team).
+- **Apps**: Limits for one app's traffic.
 
 See [Usage Limits](./usage-limits.mdx).
 

package/docs/ai-gateway/policy-templates.mdx

@@ -34,11 +34,17 @@ Policies tab.
 
 :::
 
+Everything on the **Policy Template** tab is template content, budgets included:
+a **Budgets and Costs** entry in the template sets the default budget each new
+app starts with in its own chain, and doesn't enforce anything on the team. The
+team's own budgets—shared and per-expression—live on the team's **Usage &
+Limits** tab. See [Usage Limits](./usage-limits.mdx).
+
 ## Editing a template
 
-Open a team and select its **Policies** tab. The template editor works like the
-app chain editor: add policies from the gateway's declared menu, order them, and
-configure their options.
+Open a team and select its **Policy Template** tab. The template editor works
+like the app chain editor: add policies from the gateway's declared menu, order
+them, and configure their options.
 
 Each policy in the template carries two checkboxes that control what an app
 starting from the template may do with that entry. Both start checked—a policy
@@ -55,14 +61,14 @@ by the team policy template".
 ## Inheriting from a parent team
 
 A sub-team can use its parent team's template instead of defining its own,
-controlled by the **Inherit from parent** switch on the sub-team's Policies tab.
-The switch drafts like the page's other edits and applies when you click **Save
-changes**. While inheriting, the sub-team's template is read-only—it shows the
-parent's effective template. Turn the switch off to give the sub-team its own
-template: the editor starts from a copy of the parent's effective template,
-which you then adjust. Turning inheritance back on and saving discards the
-sub-team's own template in favor of the parent's—before you save, flip the
-switch again to restore your draft.
+controlled by the **Inherit from parent** switch on the sub-team's **Policy
+Template** tab. The switch drafts like the page's other edits and applies when
+you click **Save changes**. While inheriting, the sub-team's template is
+read-only—it shows the parent's effective template. Turn the switch off to give
+the sub-team its own template: the editor starts from a copy of the parent's
+effective template, which you then adjust. Turning inheritance back on and
+saving discards the sub-team's own template in favor of the parent's—before you
+save, flip the switch again to restore your draft.
 
 ## Next steps
 

package/docs/ai-gateway/source-control.mdx

@@ -2,25 +2,28 @@
 title: AI Gateway Source Control
 sidebar_label: Source Control
 description:
-  Every AI Gateway project deploys from a Git repository you own. Learn what the
-  scaffolded repository contains, how pushes deploy to production, and which
-  changes require a deploy versus applying live.
+  A new AI Gateway project deploys without Git. Connect a repository to write
+  custom policies, review gateway source, and deploy from your default branch.
 ---
 
-An AI Gateway is a Zuplo project configured for AI traffic. Every AI Gateway
-project is backed by a Git repository that you own. The repository contains the
-gateway's routes and policy declarations, so gateway changes go through your
-normal review workflow, and custom policies are plain TypeScript files you
-commit alongside them.
+An AI Gateway is a Zuplo project configured for AI traffic. A new project
+deploys automatically, so you can configure providers, teams, and apps without
+connecting a Git repository. Connect one when you want to write
+[custom policies](./custom-policies.mdx), review gateway changes in Git, or
+deploy from your own CI/CD.
 
-## Connecting a repository
+The repository contains the gateway's routes and policy declarations. Custom
+policies are plain TypeScript files you commit alongside them.
+
+## Connect a repository
 
-A new AI Gateway project must be connected to a repository before it can deploy.
 Zuplo supports GitHub, GitLab, Bitbucket, and Azure DevOps—see
 [Source Control and Deployment](../concepts/source-control-and-deployment.mdx)
 for what each provider supports.
 
-The project shows a **Let's Get You Deployed** screen with two options:
+Open
+[**Settings → Source Control**](https://portal.zuplo.com/+/account/project/ai/settings/source-control)
+and choose one of the following:
 
 - **Create New Repo** starts a new repository with the name prefilled. With
   GitHub, this opens GitHub directly; create the repository, then return to the
@@ -28,14 +31,28 @@ The project shows a **Let's Get You Deployed** screen with two options:
 - Connect an existing repository. Use an empty one so the gateway's source has
   the repository to itself.
 
-When you connect, Zuplo adds the gateway's source to the repository, pushes it,
-and starts the first production deployment.
+When you connect, Zuplo adds the gateway's source to the repository and pushes
+it. The first push rebuilds production from that source. After that, with
+GitHub, pushes to your default branch deploy to production.
+
+Until you connect a repository, production runs the gateway template Zuplo
+deploys at project creation. Connecting a repository doesn't replace that
+production URL; the first source deploy reuses it.
+
+To work with the source locally, clone the repository:
+
+```bash
+git clone https://github.com/GITHUB_ORG/REPO_NAME.git
+```
+
+Replace `GITHUB_ORG` with your GitHub organization or user, and `REPO_NAME` with
+the repository name.
 
 :::note
 
 If your default branch requires pull requests, Zuplo pushes the gateway source
-to a setup branch and surfaces a pull request for you to merge. The first
-deployment starts once the pull request lands on the default branch.
+to a setup branch and surfaces a pull request for you to merge. The project
+finishes connecting once the pull request lands on the default branch.
 
 :::
 
@@ -56,13 +73,13 @@ Add custom policy modules under `modules/` and declare them in
 
 ## How deployments work
 
-The repository's default branch is what production runs. With GitHub, every push
-to it deploys automatically. With GitLab, Bitbucket, and Azure DevOps, your own
-CI/CD pipeline deploys by calling `zuplo deploy`—see
+After you connect a repository, its default branch is what production runs. With
+GitHub, every push to it deploys automatically. With GitLab, Bitbucket, and
+Azure DevOps, your own CI/CD pipeline deploys by calling `zuplo deploy`—see
 [Source Control and Deployment](../concepts/source-control-and-deployment.mdx).
 
-There is no in-portal code editor for AI Gateway projects—the repository is the
-source of truth, and you edit it with your normal tools.
+After you connect, the **Code** tab opens the gateway's source. You can also
+clone the repository and edit it with your normal tools.
 
 Three categories of changes take effect differently:
 

package/docs/ai-gateway/teams.mdx

@@ -18,7 +18,7 @@ on that member's role.
 
 Teams also carry a [policy template](./policy-templates.mdx)—the policy chain
 that apps created in the team start with—and [usage limits](./usage-limits.mdx)
-that apply to all of the team's apps combined.
+that apply to the team's own usage and all descendant sub-teams and apps.
 
 ## Members