@redocly/realm 0.135.0 → 0.136.0-next.0

package/dist/server/web-server/routes/skills/types.d.ts

@@ -0,0 +1,12 @@
+export type SkillsIndexEntry = {
+    name: string;
+    type: 'skill-md';
+    description: string;
+    url: string;
+    digest: string;
+};
+export type SkillsIndex = {
+    $schema: string;
+    skills: SkillsIndexEntry[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/server/web-server/utils/resolve-public-base-url.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from 'hono';
+import type { Store } from '../../store.js';
+export declare function resolvePublicBaseUrl(store: Store, ctx: Context): string;
+//# sourceMappingURL=resolve-public-base-url.d.ts.map

package/dist/server/web-server/utils/resolve-public-base-url.js

@@ -0,0 +1 @@
+import{envConfig as r}from"../../config/env-config.js";import{getRequestOrigin as t}from"./get-request-origin.js";function l(e,o){return e.getGlobalConfig("seo")?.siteUrl?.trim()||r.REDOCLY_PUBLIC_URL||t(o)}export{l as resolvePublicBaseUrl};

package/dist/server/web-server/utils.js

@@ -1 +1 @@
-import{setCookie as b}from"hono/cookie";import{withPathPrefix as l}from"@redocly/theme/core/utils";import{DEV_LOGIN_SLUG as A}from"../../constants/common.js";import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as y}from"../constants/common.js";import{getAuthProviderLoginParams as C,buildLoginUrl as O}from"./auth.js";import{renderPage as R}from"../ssr/index.js";import{telemetry as _}from"../../cli/telemetry/index.js";async function T(r,t,o,n){const{isAuthenticated:a}=r.get("auth"),i=r.req.raw.headers.get("x-forwarded-host"),e=r.req.raw.headers.get("x-forwarded-proto"),w=i?`${e==="http"||e==="https"?e:"https"}://${i}`:new URL(r.req.url).origin,g=t.getConfig().ssoDirect,p=Object.keys(g||{}),s=n||p[0],m=g?.[s];if(a)return v(r,t,{slug:o},403);const d=s&&m?await C(s,m):void 0,f=d?{...d,extraParams:{...d.extraParams,prompt:"login"}}:void 0,{loginUrl:E,cookies:h={}}=f&&O(f,w,l(o))||{},L=t.globalData.auth?.devLogin||p.length>1?z(o):E;return Object.keys(h).forEach(c=>{b(r,c,h[c].value,h[c].options)}),L?r.newResponse(null,302,{Location:L}):r.text("Unauthorized",401)}const P={};async function v(r,t,o,n,a){const i=a||String(n);let e=P[i];if(!e){const u={templateId:String(a||n),fsPath:"/",...o,baseSlug:o.slug};e=(await R(u,{},r,t,_)).html,P[i]=e}return r.html(e,n,{"Cache-Control":y})}function z(r){const t=new URLSearchParams({redirectTo:l(r)});return`${l(A)}?${t}`}async function j(r){return r.text("Forbidden",U(r))}function k(r){return r.json({message:"Forbidden"},U(r))}function U(r){const{isAuthenticated:t}=r.get("auth");return t?403:401}function G(r){const t=r?.match(/(?:^|:)(\d{1,3}(?:\.\d{1,3}){3})$/);return t?t[1]:r}export{z as getLoginUrlWithRedirect,v as handleErrorPageRender,T as handleUnauthorized,k as handleUnauthorizedApiRequest,j as handleUnauthorizedAsset,G as normalizeIpAddress};
+import{setCookie as b}from"hono/cookie";import{withPathPrefix as l}from"@redocly/theme/core/utils";import{DEV_LOGIN_SLUG as A}from"../../constants/common.js";import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as C}from"../constants/common.js";import{hasPostLogoutCookie as y}from"../utils/cookie.js";import{getAuthProviderLoginParams as _,buildLoginUrl as O}from"./auth.js";import{renderPage as R}from"../ssr/index.js";import{telemetry as v}from"../../cli/telemetry/index.js";async function k(t,r,e,n){const{isAuthenticated:a}=t.get("auth"),i=t.req.raw.headers.get("x-forwarded-host"),o=t.req.raw.headers.get("x-forwarded-proto"),w=i?`${o==="http"||o==="https"?o:"https"}://${i}`:new URL(t.req.url).origin,g=r.getConfig().ssoDirect,p=Object.keys(g||{}),d=n||p[0],m=g?.[d];if(a)return z(t,r,{slug:e},403);const s=d&&m?await _(d,m):void 0,f=s&&y(t)?{...s,extraParams:{...s.extraParams,prompt:"login",post_logout:"1"}}:s,{loginUrl:E,cookies:h={}}=f&&O(f,w,l(e))||{},L=r.globalData.auth?.devLogin||p.length>1?D(e):E;return Object.keys(h).forEach(c=>{b(t,c,h[c].value,h[c].options)}),L?t.newResponse(null,302,{Location:L}):t.text("Unauthorized",401)}const P={};async function z(t,r,e,n,a){const i=a||String(n);let o=P[i];if(!o){const u={templateId:String(a||n),fsPath:"/",...e,baseSlug:e.slug};o=(await R(u,{},t,r,v)).html,P[i]=o}return t.html(o,n,{"Cache-Control":C})}function D(t){const r=new URLSearchParams({redirectTo:l(t)});return`${l(A)}?${r}`}async function G(t){return t.text("Forbidden",U(t))}function V(t){return t.json({message:"Forbidden"},U(t))}function U(t){const{isAuthenticated:r}=t.get("auth");return r?403:401}function K(t){const r=t?.match(/(?:^|:)(\d{1,3}(?:\.\d{1,3}){3})$/);return r?r[1]:t}export{D as getLoginUrlWithRedirect,z as handleErrorPageRender,k as handleUnauthorized,V as handleUnauthorizedApiRequest,G as handleUnauthorizedAsset,K as normalizeIpAddress};

package/dist/server/workers/api-routes-worker-pool.js

@@ -1 +1 @@
-import{getAllowedEnvs as r}from"../utils/envs/get-api-route-allowed-env-variables.js";import{WorkerPool as o}from"./worker-pool.js";const p="executeApiRoute",e=3,i=new o({workerScript:"./api-routes-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{env:{...r()},stdio:"inherit"},lazy:!0});export{p as API_ROUTES_WORKER_KEY,i as apiRoutesWorkers};
+import{getAllowedEnvs as r}from"../utils/envs/get-api-route-allowed-env-variables.js";import{WorkerPool as o}from"./worker-pool.js";const p="executeApiRoute",e=3,i=new o({workerScript:"./api-routes-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{stdio:"inherit"},resolveForkEnv:r,lazy:!0});export{p as API_ROUTES_WORKER_KEY,i as apiRoutesWorkers};

package/dist/server/workers/mcp-tool-worker-pool.js

@@ -1 +1 @@
-import{getAllowedEnvs as o}from"../utils/envs/get-api-route-allowed-env-variables.js";import{WorkerPool as r}from"./worker-pool.js";const s="executeMcpTool",c="isMcpToolAvailable",e=5,l=new r({workerScript:"./mcp-tool-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{env:{...o()},stdio:"inherit"},lazy:!0});export{c as MCP_TOOL_IS_AVAILABLE_KEY,s as MCP_TOOL_WORKER_KEY,l as mcpToolWorkers};
+import{getAllowedEnvs as o}from"../utils/envs/get-api-route-allowed-env-variables.js";import{WorkerPool as r}from"./worker-pool.js";const p="executeMcpTool",c="isMcpToolAvailable",e=5,l=new r({workerScript:"./mcp-tool-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{stdio:"inherit"},resolveForkEnv:o,lazy:!0});export{c as MCP_TOOL_IS_AVAILABLE_KEY,p as MCP_TOOL_WORKER_KEY,l as mcpToolWorkers};

package/dist/server/workers/scorecards-worker-pool.js

@@ -1 +1 @@
-import{WorkerPool as r}from"./worker-pool.js";import{getAllowedEnvs as o}from"../utils/envs/get-api-route-allowed-env-variables.js";const c="startScorecardsEvaluationWorker",e=1,k=new r({workerScript:"./scorecards-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{env:o(),stdio:"inherit"},lazy:!0});export{c as SCORECARDS_WORKER_KEY,k as scorecardsWorker};
+import{WorkerPool as r}from"./worker-pool.js";import{getAllowedEnvs as o}from"../utils/envs/get-api-route-allowed-env-variables.js";const c="startScorecardsEvaluationWorker",e=1,k=new r({workerScript:"./scorecards-worker",minWorkers:1,maxWorkers:e,workerType:"process",forkOpts:{stdio:"inherit"},resolveForkEnv:o,lazy:!0});export{c as SCORECARDS_WORKER_KEY,k as scorecardsWorker};

package/dist/server/workers/worker-pool.d.ts

@@ -3,6 +3,7 @@ import type { WorkerTypeMapping, WorkerParams, WorkerResponse } from './types.js
 export type WorkerPoolConfig = {
     workerScript: string;
     lazy: boolean;
+    resolveForkEnv?: () => Record<string, string | undefined>;
 } & WorkerPoolOptions;
 type RegisteredWorkers = keyof WorkerTypeMapping;
 export declare class WorkerPool {

package/dist/server/workers/worker-pool.js

@@ -1 +1 @@
-import n from"workerpool";import{basename as a,dirname as s,resolve as l}from"node:path";import{fileURLToPath as h}from"node:url";import{envConfig as m}from"../config/env-config.js";class w{#t=null;#r;constructor(o){this.#r=o,this.#r.lazy||(this.#t=this.#o())}#o(){const{workerScript:o,lazy:t,...r}=this.#r;let e=this.#e(o);return n.pool(e,{...r})}#e(o){let t=o;if(!t.endsWith(".js")&&!t.endsWith(".mjs")&&(t=`${t}.${m.isDevelopMode?"js":"mjs"}`),!t.startsWith("."))return t;const r=s(h(import.meta.url)),e=a(r)==="chunks"?s(r):r;return l(e,t)}#i(){return this.#t||(this.#t=this.#o()),this.#t}async exec(o,t,r){let i=this.#i().exec(o,t);return r?.timeout&&(i=i.timeout(r.timeout)),await i}async terminate(){this.#t&&(await this.#t.terminate(),this.#t=null)}}export{w as WorkerPool};
+import n from"workerpool";import{basename as a,dirname as s,resolve as l}from"node:path";import{fileURLToPath as h}from"node:url";import{envConfig as m}from"../config/env-config.js";class v{#t=null;#r;constructor(o){this.#r=o,this.#r.lazy||(this.#t=this.#o())}#o(){const{workerScript:o,lazy:t,resolveForkEnv:r,...e}=this.#r;let i=this.#e(o);return r&&e.forkOpts&&(e.forkOpts={...e.forkOpts,env:r()}),n.pool(i,{...e})}#e(o){let t=o;if(!t.endsWith(".js")&&!t.endsWith(".mjs")&&(t=`${t}.${m.isDevelopMode?"js":"mjs"}`),!t.startsWith("."))return t;const r=s(h(import.meta.url)),e=a(r)==="chunks"?s(r):r;return l(e,t)}#i(){return this.#t||(this.#t=this.#o()),this.#t}async exec(o,t,r){let i=this.#i().exec(o,t);return r?.timeout&&(i=i.timeout(r.timeout)),await i}async terminate(){this.#t&&(await this.#t.terminate(),this.#t=null)}}export{v as WorkerPool};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redocly/realm",
-  "version": "0.135.0",
+  "version": "0.136.0-next.0",
   "description": "",
   "type": "module",
   "bin": {
@@ -33,7 +33,7 @@
     "@opentelemetry/semantic-conventions": "1.40.0",
     "@redocly/ajv": "8.18.0",
     "@redocly/mcp-typescript-sdk": "1.18.1",
-    "@redocly/openapi-core": "2.37.0",
+    "@redocly/openapi-core": "2.39.0",
     "@shikijs/transformers": "3.21.0",
     "@tanstack/react-query": "5.62.3",
     "@tanstack/react-table": "8.21.3",
@@ -93,14 +93,14 @@
     "xpath": "0.0.34",
     "yaml-ast-parser": "0.0.43",
     "zod": "^3.25.76",
-    "@redocly/asyncapi-docs": "1.12.0",
+    "@redocly/asyncapi-docs": "1.13.0-next.0",
+    "@redocly/config": "0.52.0",
+    "@redocly/graphql-docs": "1.13.0-next.0",
+    "@redocly/openapi-docs": "3.24.0-next.0",
     "@redocly/portal-legacy-ui": "0.18.0",
-    "@redocly/portal-plugin-mock-server": "0.20.0",
-    "@redocly/theme": "0.67.0",
-    "@redocly/realm-asyncapi-sdk": "0.13.0",
-    "@redocly/config": "0.50.1",
-    "@redocly/graphql-docs": "1.12.0",
-    "@redocly/openapi-docs": "3.23.0"
+    "@redocly/portal-plugin-mock-server": "0.21.0-next.0",
+    "@redocly/realm-asyncapi-sdk": "0.14.0-next.0",
+    "@redocly/theme": "0.68.0-next.0"
   },
   "peerDependencies": {
     "react": "^19.2.4",

package/dist/server/plugins/mcp/docs-mcp/codemode/prompts.d.ts

@@ -1,5 +0,0 @@
-export declare const EXECUTE_DESCRIPTION: string;
-export declare const DESCRIBE_TOOLS_DESCRIPTION: string;
-export declare const CODE_MODE_INSTRUCTIONS: string;
-export declare const USAGE_NOTES = "Types named `OpenApi\u2026` are the standard OpenAPI Specification objects.";
-//# sourceMappingURL=prompts.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/codemode/prompts.js

@@ -1,4 +0,0 @@
-const e=["Run JavaScript in a sandbox against the documentation tools on the global `tools` object.","The only extra global is `tools` - there is no `fetch`, `console`, `setTimeout`, `require`, or Node.js API; all I/O goes through `tools`.","","Workflow - minimize round-trips; one `describe-tools` call plus one `execute` call covers most requests:","1. Analyze the user request and decide which sandbox tools it needs (every tool name is listed in the `describe-tools` input schema).","2. Call `describe-tools` with those names to get their exact TypeScript signatures. NEVER call `execute` with guessed method names, parameter names, or enum values.","3. Batch everything the request needs into a SINGLE script: chain tool calls, pass one call's output into the next, process results in plain JavaScript (filter, map, aggregate), and `return` only what the request needs.","","Example - list the write endpoints of an API:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const writes = endpoints.filter((e) => e.method !== 'GET');","return { api: items[0].name, writes: writes.map((e) => `${e.method} ${e.path}`) };","```"].join(`
-`),t=["Get the exact TypeScript signatures of the sandbox tools available to `execute`.","Analyze the user request first, then pass `tools` with only the tool names the request needs (every name is listed in this input schema); omit `tools` only when you cannot tell which tools apply.","Always call this before your first `execute` and never guess signatures. Request every tool the task may need in ONE call instead of calling this repeatedly."].join(`
-`),s=["This server exposes documentation tools (API discovery, endpoint details, security schemes, full-text search) through two tools:","- `describe-tools` returns the exact TypeScript signatures of the sandbox tools.","- `execute` runs JavaScript that calls those tools on the global `tools` object.","Workflow: analyze the request, call `describe-tools` once with only the tool names it needs, then batch everything into a single `execute` script. Minimize round-trips and never guess tool signatures."].join(`
-`),o="Types named `OpenApi\u2026` are the standard OpenAPI Specification objects.";export{s as CODE_MODE_INSTRUCTIONS,t as DESCRIBE_TOOLS_DESCRIPTION,e as EXECUTE_DESCRIPTION,o as USAGE_NOTES};

package/dist/server/plugins/mcp/docs-mcp/codemode/sandbox.js

@@ -1,7 +0,0 @@
-import J from"@jitl/quickjs-singlefile-mjs-release-sync";import{newQuickJSWASMModuleFromVariant as A,shouldInterruptAfterDeadline as I}from"quickjs-emscripten-core";const $=1e4,C=64*1024*1024,L=256*1024,w=100,N=1024*1024,R=1024*1024;let O;function x(){return O??=A(J)}function Y(t){return`(() => {
-    const invoke = globalThis.__invoke;
-    delete globalThis.__invoke;
-    globalThis.tools = Object.freeze({ ${t.map(r=>`${JSON.stringify(r)}: (input) => invoke(${JSON.stringify(r)}, JSON.stringify(input ?? {})).then(JSON.parse)`).join(", ")} });
-  })();`}async function F(t,n,r={}){const{timeoutMs:s=$}=r,m=new Set;let M=0,f=0;const e=(await x()).newContext();let l,g=()=>{};const y=new Promise((o,c)=>{g=()=>c(new Error(`Execution timed out after ${s}ms`))}),S=()=>e.runtime.setInterruptHandler(I(Date.now()+s)),p=()=>{clearTimeout(l),l=setTimeout(g,s)};let u;try{e.runtime.setMemoryLimit(C),e.runtime.setMaxStackSize(L),S(),p(),B(e,"__invoke",(E,b)=>{const P=e.getString(E),j=JSON.parse(e.getString(b)),i=e.newPromise();return m.add(i),f++,clearTimeout(l),(++M>w?Promise.reject(new Error(`Exceeded the limit of ${w} tool calls`)):Promise.resolve().then(()=>n[P](j))).then(a=>{if(!e.alive)return;const d=JSON.stringify(a??null);if(d.length>N){const k=`Tool output is too large (${d.length} bytes); request narrower data instead`;e.newError(k).consume(i.reject)}else e.newString(d).consume(i.resolve)},a=>{e.alive&&e.newError(h(a)).consume(i.reject)}),i.settled.then(()=>{e.alive&&(S(),--f===0&&p(),e.runtime.executePendingJobs())}),i.handle}),U(e,Y(Object.keys(n))),u=e.unwrapResult(e.evalCode(`(async () => {
-${t}
-})()`));const o=e.resolvePromise(u);e.runtime.executePendingJobs();const c=await Promise.race([o,y]),T=e.unwrapResult(c),_=e.dump(T);T.dispose();const v=JSON.stringify(_??null).length;return v>R?{error:`Result is too large (${v} bytes); return less data`}:{result:_}}catch(o){return{error:h(o)}}finally{clearTimeout(l),u?.dispose();for(const o of m)o.alive&&o.dispose();try{e.dispose()}catch{O=void 0}}}function B(t,n,r){t.newFunction(n,r).consume(s=>t.setProp(t.global,n,s))}function U(t,n){t.unwrapResult(t.evalCode(n)).dispose()}function h(t){return t instanceof Error?t.message:String(t)}export{F as runInSandbox};

package/dist/server/plugins/mcp/docs-mcp/codemode/types.d.ts

@@ -1,9 +0,0 @@
-export type SandboxTool = (input: unknown) => Promise<unknown> | unknown;
-export type SandboxResult = {
-    result?: unknown;
-    error?: string;
-};
-export type RunInSandboxOptions = {
-    timeoutMs?: number;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/execute.js

@@ -1 +0,0 @@
-import{mcpToolHandlers as s}from"../../../../../client/mcp-tool-handlers-entry.js";import{EXECUTE_TOOL_NAME as c,CODE_MODE_TOOL_NAMES as u}from"../tool-schemas.js";import{sanitizeToolName as f}from"../codemode/build-tool-type-declarations.js";import{runInSandbox as l}from"../codemode/sandbox.js";import{executeMcpTool as m,isMcpToolAvailable as p}from"../../workers/execute-mcp-tool.js";const y=async(t,r,n)=>{const o=await E(r,n),{result:i,error:e}=await l(t.code,o);return{content:[{type:"text",text:JSON.stringify({result:i,error:e})}],isError:e!==void 0}};async function E(t,r){const n={};for(const o of Object.keys(s))u.has(o)||await d(o,t)&&(n[f(o)]=async i=>{const e=await m({toolName:o,args:i,context:t,extra:r}),a=O(e);if(e.isError)throw new Error(a);return T(a)});return n}async function d(t,r){try{return await p({toolName:t,context:r})}catch{return!1}}function O(t){return t.content.filter(r=>r.type==="text").map(r=>r.text).join("")}function T(t){try{return JSON.parse(t)}catch{return t}}var _={[c]:y};export{_ as default};

package/dist/server/plugins/mcp/mode.d.ts

@@ -1,9 +0,0 @@
-import type { McpMode } from './types.js';
-/**
- * Codemode (a single `execute` tool) is gated by a feature flag, not client config, so
- * only we control the rollout. Kept in its own module so the worker / telemetry path
- * does not pull in the heavier `utils.js` dependencies.
- */
-export declare function isMcpCodeModeEnabled(): boolean;
-export declare function getMcpMode(): McpMode;
-//# sourceMappingURL=mode.d.ts.map

package/dist/server/plugins/mcp/mode.js

@@ -1 +0,0 @@
-import{envConfig as o}from"../../config/env-config.js";function e(){return o.REDOCLY_EXP_MCP_CODE_MODE_ENABLED??!1}function t(){return e()?"code":"tools"}export{t as getMcpMode,e as isMcpCodeModeEnabled};