@redocly/realm 0.135.0 → 0.136.0-next.1

package/dist/server/plugins/mcp/types.d.ts

@@ -1,10 +1,11 @@
-import type { OpenAPIPath } from '@redocly/openapi-docs/src/types';
+import type { OpenAPIOperation, OpenAPIPath } from '@redocly/openapi-docs/src/types';
 import type { ApiFunctionsContext, ApiFunctionsContextMethods, PageStaticData } from '@redocly/config';
 import type { CallToolResult, RequestId, RequestInfo, RequestMeta } from '@redocly/mcp-typescript-sdk/types.js';
 import type { AuthInfo } from '@redocly/mcp-typescript-sdk/server/types.js';
 import type { OpenAPIServer } from '@redocly/openapi-docs/lib/types/open-api.js';
 import type { McpErrorCodes, McpServerType } from './constants';
 import type { McpToolSchema } from '../../types';
+import type { Skill } from '../../types/plugins/skills.js';
 type ObjectValues<T> = T[keyof T];
 export type McpServerType = ObjectValues<typeof McpServerType>;
 export type McpErrorCodeTypes = ObjectValues<typeof McpErrorCodes>;
@@ -14,6 +15,7 @@ export type ApiDescriptionInfo = {
     description?: string;
     version?: string;
     servers?: OpenAPIServer[];
+    fetchEligible?: boolean;
 };
 export type GraphqlDescriptionInfo = {
     name: string;
@@ -30,8 +32,17 @@ export type McpDocsStaticData = PageStaticData & {
         config: McpDocsStaticDataPropsConfig;
         serverOutDir?: string;
         tools?: McpToolSchema[];
+        skills?: Skill[];
+        skillsBaseUrl?: string;
     };
 };
+export type SkillMcpResource = {
+    slug: string;
+    name: string;
+    description: string;
+    content: string;
+    uri: string;
+};
 export type McpPath = {
     'x-mcp'?: XMcpConfig;
 } & OpenAPIPath;
@@ -39,10 +50,13 @@ export type XMcpConfig = {
     docs?: {
         hide?: boolean;
     };
+    gateway?: {
+        hide?: boolean;
+    };
 };
-export type McpEndpoint = {
+export type XMcpSection = keyof XMcpConfig;
+export type McpEndpoint = OpenAPIOperation & {
     'x-mcp'?: XMcpConfig;
-    [key: string]: any;
 };
 export type McpMode = 'tools' | 'code';
 export type McpPluginConfig = {
@@ -52,10 +66,10 @@ export type McpPluginConfig = {
         readonly name: string;
         readonly ignore: readonly string[];
     };
-};
-export type DocsServerDependencies = {
-    apiDescriptionsMap: Record<string, ApiDescriptionInfo>;
-    readonly name: string;
+    readonly gateway?: {
+        readonly hide: boolean;
+        readonly allowedHosts?: readonly string[];
+    };
 };
 export type McpUserInfo = {
     email?: string;
@@ -66,7 +80,7 @@ export type McpUserInfo = {
     scope?: string;
     iat?: number;
     exp?: number;
-    [key: string]: any;
+    [key: string]: unknown;
 };
 export type SemanticSearchResult = {
     title: string;
@@ -87,6 +101,7 @@ export type McpToolContext = Omit<ApiFunctionsContext, 'telemetry' | 'getKv' | k
     products?: string[];
     accessToken?: string;
     metadata?: Record<string, unknown>;
+    upstreamAuthorization?: string;
 };
 export type McpToolHandler<TArgs extends Record<string, unknown> = Record<string, unknown>> = (args: TArgs, context: McpToolContext, extra: McpToolExtra) => Promise<McpToolWorkerResponse>;
 export type McpToolIsAvailable = (context: McpToolContext) => boolean | Promise<boolean>;

package/dist/server/plugins/mcp/utils/mode.d.ts

@@ -0,0 +1,7 @@
+import type { McpMode } from '../types.js';
+/** Codemode - `execute` sandbox and `describeTools`. */
+export declare function isMcpCodeModeEnabled(): boolean;
+/** The gateway capability — a guarded `fetch` in the `execute` sandbox. Requires codemode to be on. */
+export declare function isMcpGatewayEnabled(): boolean;
+export declare function getMcpMode(): McpMode;
+//# sourceMappingURL=mode.d.ts.map

package/dist/server/plugins/mcp/utils/mode.js

@@ -0,0 +1 @@
+import{envConfig as e}from"../../../config/env-config.js";function o(){return e.REDOCLY_EXP_MCP_CODE_MODE_ENABLED??!1}function n(){return(e.REDOCLY_EXP_MCP_GATEWAY_SERVER_ENABLED??!1)&&o()}function t(){return o()?"code":"tools"}export{t as getMcpMode,o as isMcpCodeModeEnabled,n as isMcpGatewayEnabled};

package/dist/server/plugins/mcp/utils/xmcp-utils.d.ts

@@ -1,62 +1,14 @@
 import type { OpenAPIDefinition } from '@redocly/openapi-docs';
-import type { XMcpConfig, McpEndpoint, McpServerType } from '../types.js';
-/**
- * Extracts the x-mcp configuration from an MCP endpoint.
- *
- * This function safely retrieves the x-mcp extension property from an endpoint object.
- * The x-mcp property contains server-specific configuration for MCP (Model Context Protocol) endpoints.
- *
- * @param endpoint - The MCP endpoint object to extract configuration from.
- * @returns The x-mcp configuration object or undefined if not present.
- *
- * @example
- * getXMcpConfig({ 'x-mcp': { gateway: { hide: true } } }); // { gateway: { hide: true } }
- * getXMcpConfig({}); // undefined
- */
-export declare function getXMcpConfig(endpoint: McpEndpoint): XMcpConfig | undefined;
-/**
- * Checks if an endpoint should be hidden for a specific server type.
- *
- * This function determines whether an MCP endpoint should be hidden based on the
- * x-mcp configuration and the target server type (gateway or catalog).
- *
- * @param endpoint - The MCP endpoint to check.
- * @param serverType - The server type to check visibility for ('gateway' or 'catalog').
- * @returns `true` if the endpoint should be hidden, `false` otherwise.
- *
- * @example
- * isEndpointHidden({ 'x-mcp': { docs: { hide: false } } }, 'docs'); // false
- */
-export declare function isEndpointHidden(endpoint: McpEndpoint, serverType: McpServerType): boolean;
-/**
- * Checks endpoint visibility and removes x-mcp configuration from output.
- *
- * This function first checks if an endpoint should be hidden for the given server type.
- * If the endpoint is accessible, it removes the x-mcp configuration to clean up the output.
- * This is typically used to prepare endpoints for public API documentation.
- *
- * @param endpoint - The MCP endpoint to process.
- * @param serverType - The server type to check visibility for.
- * @returns `true` if the endpoint is accessible and processed, `false` if hidden.
- *
- * @example
- * checkEndpointAndDeleteXMcp(endpoint, 'docs');
- * // Returns true and removes x-mcp from endpoint if accessible
- */
-export declare function checkEndpointAndDeleteXMcp(endpoint: McpEndpoint, serverType: McpServerType): boolean;
-/**
- * Checks if an OpenAPI definition should be hidden based on x-mcp configuration.
- *
- * This function examines the info section of an OpenAPI definition for x-mcp configuration
- * and determines if the definition should be hidden for the specified server type.
- * If no server type is provided, it checks if the definition is hidden for any server type.
- *
- * @param info - The OpenAPI info object to check.
- * @param serverType - Optional server type to check ('docs' or 'gateway').
- * @returns `true` if the definition should be hidden, `false` otherwise.
- *
- * @example
- * isDefinitionHidden({ 'x-mcp': { docs: { hide: false } } }); // false
- */
-export declare function isDefinitionHidden(info: OpenAPIDefinition['info'], serverType?: McpServerType): boolean;
+import type { XMcpConfig, XMcpSection } from '../types.js';
+/**
+ * Returns false when the endpoint is hidden for `section`; otherwise strips x-mcp from the
+ * output and returns true.
+ */
+export declare function checkEndpointAndDeleteXMcp(endpoint: {
+    'x-mcp'?: XMcpConfig;
+}, section: XMcpSection): boolean;
+/** Whether the definition's info-level x-mcp hides it for `section` (defaults to `docs`). */
+export declare function isDefinitionHidden(info?: OpenAPIDefinition['info'], section?: XMcpSection): boolean;
+/** Whether the API explicitly opts into the gateway via `x-mcp.gateway`. */
+export declare function hasGatewayConfig(info: OpenAPIDefinition['info'] | undefined): boolean;
 //# sourceMappingURL=xmcp-utils.d.ts.map

package/dist/server/plugins/mcp/utils/xmcp-utils.js

@@ -1 +1 @@
-function r(e){return e?.["x-mcp"]}function i(e,t){return!!r(e)?.[t]?.hide}function c(e,t){return i(e,t)?!1:(e&&delete e["x-mcp"],!0)}function o(e,t){if(!e)return!1;const n=e["x-mcp"];return!n||typeof n!="object"?!1:t?n[t]?.hide===!0:n.docs?.hide}export{c as checkEndpointAndDeleteXMcp,r as getXMcpConfig,o as isDefinitionHidden,i as isEndpointHidden};
+function c(e,t){return e?.["x-mcp"]?.[t]?.hide?!1:(e&&delete e["x-mcp"],!0)}function i(e,t){if(!e)return!1;const n=e["x-mcp"];return!n||typeof n!="object"?!1:t?n[t]?.hide===!0:n.docs?.hide===!0}function o(e){if(!e)return!1;const t=e["x-mcp"];return!!(t&&typeof t=="object"&&t.gateway)}export{c as checkEndpointAndDeleteXMcp,o as hasGatewayConfig,i as isDefinitionHidden};

package/dist/server/plugins/mcp/utils.d.ts

@@ -60,4 +60,12 @@ export declare function filterIgnoredApiDescriptions<T extends {
 export declare function isMcpInRedirects(redirects?: {
     [key: string]: RedirectConfig;
 }): boolean;
+/** Whether an API definition is part of the Docs MCP catalog (not a localized copy, has public paths, not ignored via mcp.docs.ignore). */
+export declare function isApiIncludedInDocsMcp(relativePath: string, definition: {
+    paths?: Record<string, unknown>;
+} | undefined, mcpConfig: {
+    docs?: {
+        ignore?: readonly string[];
+    };
+} | undefined): boolean;
 //# sourceMappingURL=utils.d.ts.map

package/dist/server/plugins/mcp/utils.js

@@ -1 +1 @@
-import p,{join as c}from"node:path";import D from"picomatch";import{PUBLIC_API_DEFINITIONS_FOLDER as f,L10N_DIR_NAME as a,I18N_DIR_NAME as u}from"../../constants/common.js";import{RESERVED_ROUTES as l}from"../../plugins/get-reserved-routes.js";import{canDownloadApiDefinition as h}from"../../utils/rbac.js";function o(r){if(typeof r!="object"||r===null)return r;if(Array.isArray(r))return r.map(o);const i={};for(const t in r)if(Object.hasOwn(r,t)){if(t.toString().startsWith("x-parsed-"))continue;i[t]=o(r[t])}return i}function R(r){return r.reduce((i,t)=>(t.relativePath.startsWith(a)||t.relativePath.startsWith(u)||t.definition?.paths&&Object.keys(t.definition.paths).length>0&&i.push({...t,definition:o(t.definition)}),i),[])}function x(r,i,t,e){const n={};for(const[m,s]of Object.entries(r))h(c(f,s.relativePath),t,e,i)&&(n[m]=s);return n}function E(r,i,t,e){return r.filter(n=>h(c(f,n.relativePath),t,e,i))}function P(r){return r.filter(({relativePath:i})=>!i.startsWith(a)&&!i.startsWith(u)).map(({relativePath:i,settings:t})=>({name:t.info?.title||p.basename(i,p.extname(i)),description:t.info?.description,relativePath:i}))}function _(r,i){return r.filter(({relativePath:t})=>!D(i||[])(t))}function g(r={}){for(const[i,t]of Object.entries(r))if(i===l.mcp||(typeof t=="string"?t:t.to)===l.mcp)return!0;return!1}export{P as buildGraphqlDescriptions,x as filterApiDescriptionsByRbac,E as filterGraphqlDescriptionsByRbac,_ as filterIgnoredApiDescriptions,R as getCleanedUpApiDescriptions,g as isMcpInRedirects};
+import f,{join as a}from"node:path";import u from"picomatch";import{PUBLIC_API_DEFINITIONS_FOLDER as h,L10N_DIR_NAME as o,I18N_DIR_NAME as s}from"../../constants/common.js";import{RESERVED_ROUTES as l}from"../../plugins/get-reserved-routes.js";import{canDownloadApiDefinition as m}from"../../utils/rbac.js";function p(r){if(typeof r!="object"||r===null)return r;if(Array.isArray(r))return r.map(p);const i={};for(const t in r)if(Object.hasOwn(r,t)){if(t.toString().startsWith("x-parsed-"))continue;i[t]=p(r[t])}return i}function x(r){return r.reduce((i,t)=>(t.relativePath.startsWith(o)||t.relativePath.startsWith(s)||t.definition?.paths&&Object.keys(t.definition.paths).length>0&&i.push({...t,definition:p(t.definition)}),i),[])}function R(r,i,t,e){const n={};for(const[D,c]of Object.entries(r))m(a(h,c.relativePath),t,e,i)&&(n[D]=c);return n}function g(r,i,t,e){return r.filter(n=>m(a(h,n.relativePath),t,e,i))}function E(r){return r.filter(({relativePath:i})=>!i.startsWith(o)&&!i.startsWith(s)).map(({relativePath:i,settings:t})=>({name:t.info?.title||f.basename(i,f.extname(i)),description:t.info?.description,relativePath:i}))}function _(r,i){return r.filter(({relativePath:t})=>!u(i||[])(t))}function W(r={}){for(const[i,t]of Object.entries(r))if(i===l.mcp||(typeof t=="string"?t:t.to)===l.mcp)return!0;return!1}function b(r,i,t){return r.startsWith(o)||r.startsWith(s)||!i?.paths||Object.keys(i.paths).length===0?!1:!u(t?.docs?.ignore||[])(r)}export{E as buildGraphqlDescriptions,R as filterApiDescriptionsByRbac,g as filterGraphqlDescriptionsByRbac,_ as filterIgnoredApiDescriptions,x as getCleanedUpApiDescriptions,b as isApiIncludedInDocsMcp,W as isMcpInRedirects};

package/dist/server/plugins/mcp/workers/execute-mcp-tool.js

@@ -1 +1 @@
-import{telemetry as u}from"../../../telemetry/index.js";import{mcpToolHandlers as p}from"../../../../client/mcp-tool-handlers-entry.js";import{getMcpMode as m}from"../mode.js";import{reportMcpToolCalled as w,reportMcpToolError as f}from"./mcp-tool-telemetry.js";async function b(n){u.initialize();const{toolName:t,args:c,context:o,extra:l}=n,r=m();try{const e=p[t];if(!e)throw new Error(`Unknown MCP tool: ${t}`);const{default:d}=await e(),i=d[t];if(!i)throw new Error(`MCP tool module does not export a handler for "${t}". Expected \`export default { '${t}': handler }\`.`);const a=await(typeof i=="function"?i:i.execute)(c,o,l);if(!x(a))throw new Error(`MCP tool "${t}" returned an invalid result.`);if(a.isError)f(t,a.content.map(({text:s})=>s).join(" "),r);else{const s=a.content.map(({text:h})=>h).join("").length;w(t,r,s)}return a}catch(e){throw f(t,e instanceof Error?e.message:String(e),r,e instanceof Error&&e.stack||""),e}}function x(n){return!n||typeof n!="object"?!1:Array.isArray(n.content)}async function T(n){u.initialize();const{toolName:t,context:c}=n;try{const o=p[t];if(!o)return!1;const{default:l}=await o(),r=l[t];return r?typeof r=="object"&&typeof r.isAvailable=="function"?await r.isAvailable(c):!0:!1}catch(o){throw f(t,"Failed to check if MCP tool is available: "+(o instanceof Error?o.message:String(o)),m(),o instanceof Error&&o.stack||""),o}}export{b as executeMcpTool,T as isMcpToolAvailable};
+import{telemetry as d}from"../../../telemetry/index.js";import{mcpToolHandlers as w}from"../../../../client/mcp-tool-handlers-entry.js";import{getMcpMode as h}from"../utils/mode.js";import{McpServerType as i}from"../constants.js";import{reportMcpToolCalled as x,reportMcpToolError as u}from"./mcp-tool-telemetry.js";async function A(r){d.initialize();const{toolName:o,args:l,context:f,extra:t}=r,a=h(),n=performance.now();try{const e=w[o];if(!e)throw new Error(`Unknown MCP tool: ${o}`);const{default:M}=await e(),c=M[o];if(!c)throw new Error(`MCP tool module does not export a handler for "${o}". Expected \`export default { '${o}': handler }\`.`);const s=await(typeof c=="function"?c:c.execute)(l,f,t);if(!g(s))throw new Error(`MCP tool "${o}" returned an invalid result.`);const m=Math.round(performance.now()-n);if(s.isError)u({tool:o,message:s.content.map(({text:p})=>p).join(" "),mode:a,serverType:i.Docs,durationMs:m});else{const p=s.content.map(({text:y})=>y).join("").length;x({tool:o,mode:a,serverType:i.Docs,durationMs:m,outputLength:p})}return s}catch(e){throw u({tool:o,message:e instanceof Error?e.message:String(e),mode:a,serverType:i.Docs,durationMs:Math.round(performance.now()-n),stack:e instanceof Error&&e.stack||""}),e}}function g(r){return!r||typeof r!="object"?!1:Array.isArray(r.content)}async function j(r){d.initialize();const{toolName:o,context:l}=r,f=performance.now();try{const t=w[o];if(!t)return!1;const{default:a}=await t(),n=a[o];return n?typeof n=="object"&&typeof n.isAvailable=="function"?await n.isAvailable(l):!0:!1}catch(t){throw u({tool:o,message:"Failed to check if MCP tool is available: "+(t instanceof Error?t.message:String(t)),mode:h(),serverType:i.Docs,durationMs:Math.round(performance.now()-f),stack:t instanceof Error&&t.stack||""}),t}}export{A as executeMcpTool,j as isMcpToolAvailable};

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.d.ts

@@ -1,4 +1,16 @@
-import type { McpMode } from '../types.js';
-export declare function reportMcpToolCalled(tool: string, mode: McpMode, outputLength: number): void;
-export declare function reportMcpToolError(tool: string, message: string, mode: McpMode, stack?: string): void;
+import type { McpMode, McpServerType } from '../types.js';
+type McpToolEvent = {
+    tool: string;
+    mode: McpMode;
+    serverType: McpServerType;
+    durationMs: number;
+};
+export declare function reportMcpToolCalled({ tool, mode, serverType, durationMs, outputLength }: McpToolEvent & {
+    outputLength: number;
+}): void;
+export declare function reportMcpToolError({ tool, mode, serverType, durationMs, message, stack }: McpToolEvent & {
+    message: string;
+    stack?: string;
+}): void;
+export {};
 //# sourceMappingURL=mcp-tool-telemetry.d.ts.map

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.js

@@ -1 +1 @@
-import{telemetry as p}from"../../../telemetry/index.js";import{McpServerType as t}from"../constants.js";const c={id:t.Docs,object:"mcpServer",uri:`urn:redocly:realm:mcp:server:${t.Docs}`,server_type:t.Docs};function m(e,r,o){p.sendMcpToolCalledMessage([{...c,tool:e,mode:r,output_length:o}])}function i(e,r,o,s=""){p.sendMcpErrorMessage([{...c,tool:e,message:r,stack:s,mode:o}])}export{m as reportMcpToolCalled,i as reportMcpToolError};
+import{telemetry as c}from"../../../telemetry/index.js";function l(r){return{id:r,object:"mcpServer",uri:`urn:redocly:realm:mcp:server:${r}`,server_type:r}}function s({tool:r,mode:e,serverType:o,durationMs:t,outputLength:n}){c.sendMcpToolCalledMessage([{...l(o),tool:r,mode:e,output_length:n,duration_ms:t}])}function i({tool:r,mode:e,serverType:o,durationMs:t,message:n,stack:p=""}){c.sendMcpErrorMessage([{...l(o),tool:r,message:n,stack:p,mode:e,duration_ms:t}])}export{s as reportMcpToolCalled,i as reportMcpToolError};

package/dist/server/plugins/openapi-docs/index.js

@@ -1 +1 @@
-import{simplifyAstStructure as Z}from"@redocly/openapi-docs";import{REDOCLY_ROUTE_RBAC as A,REDOCLY_TEAMS_RBAC as S}from"@redocly/config";import{OPENAPI_DOCS_TEMPLATE_ID as H,PUBLIC_RBAC_SCOPE_ITEM as $}from"../../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as ee,PUBLIC_API_DEFINITIONS_FOLDER as te}from"../../constants/common.js";import{OPENAPI_SHARED_DATA_PREFIX as j}from"../../constants/plugins/openapi-docs.js";import{envConfig as G}from"../../config/env-config.js";import{isRbacScopeItems as oe}from"../../utils/rbac/is-rbac-scope-items.js";import{getRouteSlugsForPath as ae}from"../utils.js";import{searchResolver as re}from"./search/search-resolver.js";import{convertOpenAPIDocs2Sidebar as se,shouldAddRoute as ne}from"./utils.js";import{getTemplatePath as U}from"./get-template-path.js";import{storeDefinitionBundles as ie}from"./store-definition-bundles.js";import{definitionLoader as pe,definitionsLoader as ce}from"./load-definition.js";import{getAiDocumentsStore as de}from"./search/get-ai-search-documents.js";import{fromCurrentDir as le}from"../../utils/paths.js";import{telemetryTraceStep as fe}from"../../../cli/telemetry/helpers/trace-step.js";import{getApiConfigByPath as ue}from"../get-api-config.js";const B="openapi-spec-download";async function Te(){let L=[],E={},M=new Set,f={};return{id:"openapi",requiredEntitlements:["openapi"],loaders:{"load-oas-docs":ce,"load-oas":pe},processContent:async(e,c)=>{await fe("build.plugin.openapi_docs",async u=>{e.createRequestHandler(B,le(import.meta.url,"./spec-download.api.js")),e.addApiRoute({slug:te+"/*",requestHandlerId:B,httpMethod:"all",[S]:$,getStaticData:async()=>({props:{}})}),e.addApiRoute({slug:ee+"/*",requestHandlerId:B,httpMethod:"all",[S]:$,getStaticData:async()=>({props:{}})});const _=e.createTemplate(H,U("../../../client/templates/openapi-docs/template.js")),a=e.registerServerPropsGetter(H,U("./get-server-props.js")),o=await c.getConfig();u?.setAttribute("config",JSON.stringify(o.openapi||{})),E={},f={};const p=await e.loadOpenApiDefinitions(c);L=p.map(({markdocChunks:r,relativePath:m,customOutputRelativeFile:i,isVirtual:n,realRelativePath:g})=>({chunks:r,relativePath:m,realRelativePath:g,isVirtual:i!=null||n})),ie(p,e.outdir);for(const r of p||[]){const{definition:m,config:i,relativePath:n,customOutputRelativeFile:g,contentItems:C,flatItems:D,parser:d,options:I,rawOptions:V,hash:q}=r,b=g||n,s=[],k={},{definition:Y}=d||{},{info:l}=Y||{},y=l?.["x-metadata"],v=!!i.openapi?.excludeFromSearch||!!i.theme?.openapi?.excludeFromSearch||!!o.openapi?.excludeFromSearch||!!o.theme?.openapi?.excludeFromSearch,x={title:l?.title,description:l?.description,summary:l?.summary,...i.metadata,...y},h={untagged:[],tagged:new Map};for(const t of D){const{id:O,href:P,operationDefinition:F}=t;if(F){const{tags:R}=F;if(R)for(const w of R)h.tagged.has(w)||h.tagged.set(w,[]),h.tagged.get(w)?.push(t);else h.untagged.push(t);G.isDevelopMode&&(k[`#${F.pointer}`]=t.href)}if(!ne({item:t}))continue;const T=t,W=T.type==="section"&&!!T.infoDefinition,X=P.split("#")[0]+"/",z=t?.operationDefinition?.[S],K=oe(i.access?.rbac)?i.access.rbac:void 0;s.push({excludeFromSearch:v,slugSuffix:X,fsPath:b,metadata:{subType:"openapi-operation"},httpVerb:t?.httpVerb||"",path:n,templateId:_,[S]:z||K,getAiDocumentsStore:de({parser:d,options:I,info:l,tagOperations:h,openapiContentItem:T,metadata:x,relativePath:n,getSearchFacets:e.getSearchFacets,includeInLLMsTxt:W,excludeFromSearch:v}),getStaticData:async R=>({props:{dynamicMarkdocComponents:["openapi"],baseSlug:R.baseSlug,seo:t["x-metadata"]?.seo||{title:t.name,description:t.description},itemId:O,disableAutoScroll:!0}})})}if(s[0]={...s[0],metadata:{type:"openapi",...x},hasClientRoutes:!0,getSidebar:(t,O)=>{const P=[];return se({contentItems:C,sidebarItems:P,routeSlug:t.slug,navItem:O}),P},getNavText:()=>l?.title,getSearchDocuments:re(d,I,D,e.getSearchFacets,e.setSearchFacets,v)},y?.apiId&&!r.isVirtual){const t=ue(r.config.apis,r.realRelativePath);f[y.apiId]={[S]:t.rbac,[A]:{fsPath:b}}}const J=s[0];s[0]=s[s.length-1],s[s.length-1]=J;for(const t of s)e.addRoute({...t,serverPropsGetterIds:[a]});const Q=G.isDevelopMode?n:void 0,N=`${j}${n}`;E[N]={fsPath:b,definition:m,options:V,sourcePath:Q,routesMapping:k,hash:q};for(const t of s)e.addRoute({...t,sharedData:[{id:N,key:"openAPIDocsStore"}],serverPropsGetterIds:[a]})}})},afterRoutesCreated:async(e,c)=>{const u=new Set;for(const{chunks:a,relativePath:o,isVirtual:p,realRelativePath:r}of L){const m=ae(e.getAllRoutes(),o),i=(await c.cache.load(r,"load-oas")).compoundHash;await c.cache.load(o,{loader:async function(){for(const{node:g,markdown:C,key:D,relativePath:d}of a){const{ast:I}=await e.parseMarkdoc({input:{content:C,relativePath:d,isVirtual:p},context:c,deps:{sharedDataIds:[`${j}${d}`],routeSlugs:m}});g[`x-parsed-md-${D}`]={result:Z(I)}}},name:"openapi-markdoc-inline-parser"},[i]);for(const{pointer:n}of a)u.add(n)}const _=M.difference(u);for(const a of _)c.cache.delete(a);M=u;for(const[a,o]of Object.entries(E))await e.createSharedData(a,{...o,baseSlug:e.getRouteByFsPath(o.fsPath)?.baseSlug},o.hash);Object.entries(f).forEach(([a,o])=>{const p=o[A]?.fsPath;if(!p)return;const r=e.getRouteByFsPath(p)?.baseSlug;f[a]={...o,[A]:{...o[A],slug:r},slug:r}}),e.setGlobalData({apiProducts:f})}}}export{Te as openAPIDocsPlugin};
+import{simplifyAstStructure as Z}from"@redocly/openapi-docs";import{REDOCLY_ROUTE_RBAC as y,REDOCLY_TEAMS_RBAC as D}from"@redocly/config";import{OPENAPI_DOCS_TEMPLATE_ID as j,PUBLIC_RBAC_SCOPE_ITEM as U}from"../../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as ee,PUBLIC_API_DEFINITIONS_FOLDER as te}from"../../constants/common.js";import{OPENAPI_SHARED_DATA_PREFIX as L}from"../../constants/plugins/openapi-docs.js";import{envConfig as V}from"../../config/env-config.js";import{isRbacScopeItems as oe}from"../../utils/rbac/is-rbac-scope-items.js";import{getRouteSlugsForPath as ae}from"../utils.js";import{searchResolver as re}from"./search/search-resolver.js";import{convertOpenAPIDocs2Sidebar as ie,shouldAddRoute as se}from"./utils.js";import{getTemplatePath as q}from"./get-template-path.js";import{storeDefinitionBundles as ne}from"./store-definition-bundles.js";import{definitionLoader as pe,definitionsLoader as ce}from"./load-definition.js";import{getAiDocumentsStore as de}from"./search/get-ai-search-documents.js";import{fromCurrentDir as le}from"../../utils/paths.js";import{telemetryTraceStep as fe}from"../../../cli/telemetry/helpers/trace-step.js";import{getApiConfigByPath as ue}from"../get-api-config.js";import{shouldAdvertiseGatewayXMcp as me,buildGatewayXMcp as ge}from"../mcp/gateway-mcp/eligibility.js";const x="openapi-spec-download";async function Be(){let k=[],C={},N=new Set,d={};return{id:"openapi",requiredEntitlements:["openapi"],loaders:{"load-oas-docs":ce,"load-oas":pe},processContent:async(e,n)=>{await fe("build.plugin.openapi_docs",async l=>{e.createRequestHandler(x,le(import.meta.url,"./spec-download.api.js")),e.addApiRoute({slug:te+"/*",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})}),e.addApiRoute({slug:ee+"/*",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})});const E=e.createTemplate(j,q("../../../client/templates/openapi-docs/template.js")),f=e.registerServerPropsGetter(j,q("./get-server-props.js")),u=await n.getConfig();l?.setAttribute("config",JSON.stringify(u.openapi||{})),C={},d={};const p=await e.loadOpenApiDefinitions(n);k=p.map(({markdocChunks:a,relativePath:o,customOutputRelativeFile:r,isVirtual:i,realRelativePath:m})=>({chunks:a,relativePath:o,realRelativePath:m,isVirtual:r!=null||i})),ne(p,e.outdir);for(const a of p||[]){const{definition:o,config:r,relativePath:i,customOutputRelativeFile:m,contentItems:_,flatItems:g,parser:h,options:I,rawOptions:v,hash:R}=a,S=m||i,s=[],G={},{definition:X}=h||{},{info:c}=X||{},O=c?.["x-metadata"],w=!!r.openapi?.excludeFromSearch||!!r.theme?.openapi?.excludeFromSearch||!!u.openapi?.excludeFromSearch||!!u.theme?.openapi?.excludeFromSearch,H={title:c?.title,description:c?.description,summary:c?.summary,...r.metadata,...O},P={untagged:[],tagged:new Map};for(const t of g){const{id:F,href:A,operationDefinition:T}=t;if(T){const{tags:b}=T;if(b)for(const B of b)P.tagged.has(B)||P.tagged.set(B,[]),P.tagged.get(B)?.push(t);else P.untagged.push(t);V.isDevelopMode&&(G[`#${T.pointer}`]=t.href)}if(!se({item:t}))continue;const M=t,Q=M.type==="section"&&!!M.infoDefinition,W=A.split("#")[0]+"/",z=t?.operationDefinition?.[D],K=oe(r.access?.rbac)?r.access.rbac:void 0;s.push({excludeFromSearch:w,slugSuffix:W,fsPath:S,metadata:{subType:"openapi-operation"},httpVerb:t?.httpVerb||"",path:i,templateId:E,[D]:z||K,getAiDocumentsStore:de({parser:h,options:I,info:c,tagOperations:P,openapiContentItem:M,metadata:H,relativePath:i,getSearchFacets:e.getSearchFacets,includeInLLMsTxt:Q,excludeFromSearch:w}),getStaticData:async b=>({props:{dynamicMarkdocComponents:["openapi"],baseSlug:b.baseSlug,seo:t["x-metadata"]?.seo||{title:t.name,description:t.description},itemId:F,disableAutoScroll:!0}})})}if(s[0]={...s[0],metadata:{type:"openapi",...H},hasClientRoutes:!0,getSidebar:(t,F)=>{const A=[];return ie({contentItems:_,sidebarItems:A,routeSlug:t.slug,navItem:F}),A},getNavText:()=>c?.title,getSearchDocuments:re(h,I,g,e.getSearchFacets,e.setSearchFacets,w)},O?.apiId&&!a.isVirtual){const t=ue(a.config.apis,a.realRelativePath);d[O.apiId]={[D]:t.rbac,[y]:{fsPath:S}}}const Y=s[0];s[0]=s[s.length-1],s[s.length-1]=Y;for(const t of s)e.addRoute({...t,serverPropsGetterIds:[f]});const J=V.isDevelopMode?i:void 0,$=`${L}${i}`;C[$]={fsPath:S,definition:o,options:v,sourcePath:J,routesMapping:G,hash:R};for(const t of s)e.addRoute({...t,sharedData:[{id:$,key:"openAPIDocsStore"}],serverPropsGetterIds:[f]})}})},afterRoutesCreated:async(e,n)=>{const l=new Set;for(const{chunks:a,relativePath:o,isVirtual:r,realRelativePath:i}of k){const m=ae(e.getAllRoutes(),o),_=(await n.cache.load(i,"load-oas")).compoundHash;await n.cache.load(o,{loader:async function(){for(const{node:h,markdown:I,key:v,relativePath:R}of a){const{ast:S}=await e.parseMarkdoc({input:{content:I,relativePath:R,isVirtual:r},context:n,deps:{sharedDataIds:[`${L}${R}`],routeSlugs:m}});h[`x-parsed-md-${v}`]={result:Z(S)}}},name:"openapi-markdoc-inline-parser"},[_]);for(const{pointer:g}of a)l.add(g)}const E=N.difference(l);for(const a of E)n.cache.delete(a);N=l;const f=e.getConfig(),u=f.access?.rbac??{},p=n.withPathPrefix("/mcp");for(const[a,o]of Object.entries(C)){const r=e.getRouteByFsPath(o.fsPath)?.baseSlug,i=r&&me(o.definition,a.slice(L.length),u,f.mcp)?{...o.definition,"x-mcp":{...ge(p),...o.definition["x-mcp"],servers:[{url:p}]}}:o.definition;await e.createSharedData(a,{...o,definition:i,baseSlug:r},o.hash)}Object.entries(d).forEach(([a,o])=>{const r=o[y]?.fsPath;if(!r)return;const i=e.getRouteByFsPath(r)?.baseSlug;d[a]={...o,[y]:{...o[y],slug:i},slug:i}}),e.setGlobalData({apiProducts:d})}}}export{Be as openAPIDocsPlugin};

package/dist/server/plugins/search/engines/search-engine.d.ts

@@ -1,5 +1,6 @@
 import type { SearchFacet } from '@redocly/theme/core/types';
-import type { SearchEngineType, AfterRoutesCreatedActions, AddDocumentsParams, SearchDocument, AuthDetails } from '../../../types';
+import type { SearchEngineType } from '@redocly/config';
+import type { AfterRoutesCreatedActions, AddDocumentsParams, SearchDocument, AuthDetails } from '../../../types';
 import type { FacetCountsRequestParams, GlobalData, SearchRequestParams, SearchResponse } from '../../../../types/index.js';
 export declare class SearchEngine {
     #private;

package/dist/server/plugins/search/index.js

@@ -1 +1 @@
-import{REDOCLY_TEAMS_RBAC as p}from"@redocly/config";import{DEFAULT_SEARCH_ENGINE as s}from"../../constants/plugins/search.js";import{envConfig as c}from"../../config/env-config.js";import{logger as E}from"../../tools/notifiers/logger.js";import{reporter as u}from"../../tools/notifiers/reporter.js";import{prepareSearchDocuments as S}from"./documents/search-documents.js";import{SearchEngine as b}from"./engines/search-engine.js";import{prepareSemanticDocuments as D}from"./ai-indexer/prepare-semantic-documents.js";import{isAiSearchEnabled as y,shouldGenerateEmbeddings as A}from"./utils.js";import{telemetryTraceStep as C}from"../../../cli/telemetry/helpers/trace-step.js";import{EntitlementsProvider as R}from"../../entitlements/entitlements-provider.js";async function B(){let e=!0;return{async afterRoutesCreated(t,i){(c.SEARCH_DEV_REINIT||e)&&await _(t,i),e=!1},id:"search"}}async function _(e,t){await C("build.plugin.search",async i=>{const r=e.getConfig();if(i?.setAttribute("config",JSON.stringify(r.search||{})),r.search?.hide){E.info("Search is disabled in the config, skipping");return}const o=r.search?.engine||s,m=c.isDevelopMode?c.SEARCH_DEV_DEBUG?o:s:o,{l10n:l}=e.getGlobalData(),d=y(r),n=r.access?.rbac?.features?.aiSearch,f=A(r);let a;try{a=new b(m,l)}catch(g){await u.panic(g);return}await a.initIndexSchema(e.getSearchFacets()),e.setSearchEngine(a),e.setGlobalData({searchFeatures:{advanced:{enabled:m!==s&&!r.search?.filters?.hide},ai:{enabled:d,[p]:n&&Object.keys(n).length?n:void 0}}}),await S(t.fs,e,a);const h=R.instance().canAccessFeature("seo")===!0&&r.seo?.llmstxt?.hide!==!0;await D(e,t,{embeddingsEnabled:f,llmstxtEnabled:h})})}export{B as searchPlugin};
+import{DEFAULT_SEARCH_ENGINE as s,REDOCLY_TEAMS_RBAC as E}from"@redocly/config";import{envConfig as c}from"../../config/env-config.js";import{logger as p}from"../../tools/notifiers/logger.js";import{reporter as u}from"../../tools/notifiers/reporter.js";import{prepareSearchDocuments as S}from"./documents/search-documents.js";import{SearchEngine as b}from"./engines/search-engine.js";import{prepareSemanticDocuments as D}from"./ai-indexer/prepare-semantic-documents.js";import{isAiSearchEnabled as y,shouldGenerateEmbeddings as A}from"./utils.js";import{telemetryTraceStep as C}from"../../../cli/telemetry/helpers/trace-step.js";import{EntitlementsProvider as R}from"../../entitlements/entitlements-provider.js";async function k(){let e=!0;return{async afterRoutesCreated(t,n){(c.SEARCH_DEV_REINIT||e)&&await _(t,n),e=!1},id:"search"}}async function _(e,t){await C("build.plugin.search",async n=>{const r=e.getConfig();if(n?.setAttribute("config",JSON.stringify(r.search||{})),r.search?.hide){p.info("Search is disabled in the config, skipping");return}const o=r.search?.engine||s,m=c.isDevelopMode?c.SEARCH_DEV_DEBUG?o:s:o,{l10n:l}=e.getGlobalData(),d=y(r),i=r.access?.rbac?.features?.aiSearch,f=A(r);let a;try{a=new b(m,l)}catch(g){await u.panic(g);return}await a.initIndexSchema(e.getSearchFacets()),e.setSearchEngine(a),e.setGlobalData({searchFeatures:{advanced:{enabled:m!==s&&!r.search?.filters?.hide},ai:{enabled:d,[E]:i&&Object.keys(i).length?i:void 0}}}),await S(t.fs,e,a);const h=R.instance().canAccessFeature("seo")===!0&&r.seo?.llmstxt?.hide!==!0;await D(e,t,{embeddingsEnabled:f,llmstxtEnabled:h})})}export{k as searchPlugin};

package/dist/server/plugins/skills/discover-skills.d.ts

@@ -0,0 +1,17 @@
+import type { Skill } from '../../types/plugins/skills.js';
+type DiscoverSkillsInput = {
+    cwd: string;
+    excludeFiles?: string[];
+};
+/**
+ * Produce the full, unfiltered skill set: one skill per `@skills/<folder>/SKILL.md`
+ * plus an optional root `SKILL.md`. Slugs must be unique: the root skill wins over a
+ * colliding `@skills` entry.
+ *
+ * Skill filenames in folders are matched case-insensitively against directory listings,
+ * so behavior is identical on case-sensitive and case-insensitive filesystems — the
+ * lowercase served path is a routing concern, not an authoring rule.
+ */
+export declare function discoverSkills(input: DiscoverSkillsInput): Promise<Skill[]>;
+export {};
+//# sourceMappingURL=discover-skills.d.ts.map

package/dist/server/plugins/skills/discover-skills.js

@@ -0,0 +1 @@
+import k from"picomatch";import{readdir as w,readFile as F}from"fs/promises";import p from"node:path";import{USER_SKILLS_ALIAS as h,USER_SKILL_FILENAME as u}from"../../../constants/common.js";import{logger as S}from"../../tools/notifiers/logger.js";import{slug as y}from"../../../utils/slugger.js";import{envConfig as L}from"../../config/env-config.js";import{parseSkill as j}from"./utils/parse-skill.js";const E="project-docs";async function M(t){const{cwd:s,excludeFiles:e=[]}=t,o=L.PROJECT_SLUG||E,l=e.map(r=>k(r)),c=new Map,d=await g(p.join(s,u)),i=d!==void 0?[{slug:o,fsPath:u,content:d}]:[],a=await _({cwd:s,baseSegments:[h]});for(const r of[...a,...i]){if(l.some(m=>m(r.fsPath)))continue;const n=j(r);if("error"in n){S.warn(n.error);continue}const f=c.get(n.slug);f!==void 0&&S.warn(`Skill "${n.slug}" from "${f.fsPath}" is replaced by "${n.fsPath}".`),c.set(n.slug,n)}return Array.from(c.values())}async function _(t){const{cwd:s,baseSegments:e}=t,o=p.join(s,...e),l=[],c=new Map,d=await P(o);for(const i of d){const a=y(i,{replaceDots:!0}),r=c.get(a);if(r!==void 0){S.warn(`Skipping skill folder "${[...e,i].join("/")}": its slug "${a}" collides with the folder "${r}" after slugification.`);continue}const n=await I(p.join(o,i)),f=$(n,[...e,i].join("/"));if(f===void 0)continue;const m=await g(p.join(o,i,f));m!==void 0&&(c.set(a,i),l.push({slug:a,fsPath:[...e,i,f].join("/"),content:m}))}return l}function $(t,s){const e=t.filter(l=>l.toLowerCase()===u.toLowerCase()),o=e.includes(u)?u:e[0];return e.length>1&&S.warn(`Multiple skill files in "${s}" differ only by case; using "${o}".`),o}async function g(t){try{return await F(t,"utf-8")}catch{return}}async function P(t){try{return(await w(t,{withFileTypes:!0})).filter(e=>e.isDirectory()).map(e=>e.name).sort()}catch{return[]}}async function I(t){try{return(await w(t,{withFileTypes:!0})).filter(e=>e.isFile()).map(e=>e.name).sort()}catch{return[]}}export{M as discoverSkills};

package/dist/server/plugins/skills/index.d.ts

@@ -0,0 +1,3 @@
+import type { LifecyclePluginInstance } from '../../types';
+export declare function skillsPlugin(): Promise<LifecyclePluginInstance>;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/skills/index.js

@@ -0,0 +1 @@
+import{discoverSkills as r}from"./discover-skills.js";async function o(){return{id:"skills",async afterRoutesCreated(s,l){const e=s.getConfig();if(e.skills?.hide===!0)return;const i=await r({cwd:l.fs.cwd,excludeFiles:e.skills?.excludeFiles??[]});s.addSkills(i),l.logger.verbose(`Discovered ${i.length} skill(s)`)}}}export{o as skillsPlugin};

package/dist/server/plugins/skills/utils/parse-skill.d.ts

@@ -0,0 +1,18 @@
+import type { Skill } from '../../../types/plugins/skills.js';
+type ParseSkillInput = {
+    slug: string;
+    fsPath: string;
+    content: string;
+};
+type ParseSkillError = {
+    error: string;
+};
+/**
+ * @param input - the skill slug, its project-relative path, and the raw file content
+ * @returns the parsed `Skill` with a `sha256:<hex>` digest over the raw content,
+ * or a `{ error }` object when the frontmatter is invalid or the required
+ * `name`/`description` fields are missing
+ */
+export declare function parseSkill(input: ParseSkillInput): Skill | ParseSkillError;
+export {};
+//# sourceMappingURL=parse-skill.d.ts.map

package/dist/server/plugins/skills/utils/parse-skill.js

@@ -0,0 +1 @@
+import{extractFrontmatter as p}from"../../markdown/extract-frontmatter.js";import{shaHex as d}from"../../../utils/crypto/sha-hex.js";function u(s){const{slug:a,fsPath:t,content:e}=s,{frontmatter:r,frontmatterError:i}=p(e);if(i)return{error:`Invalid frontmatter in ${t}: ${i}`};const n=typeof r.name=="string"?r.name.trim():"",o=typeof r.description=="string"?r.description.trim():"";if(!n)return{error:`Skill ${t} is missing required frontmatter "name"`};if(!o)return{error:`Skill ${t} is missing required frontmatter "description"`};const c=r.rbac&&typeof r.rbac=="object"&&!Array.isArray(r.rbac)?r.rbac:void 0,f=Array.isArray(r.tags)?r.tags.filter(m=>typeof m=="string"):[];return{slug:a,name:n,description:o,content:e,digest:`sha256:${d(e)}`,fsPath:t,rbac:c,tags:f}}export{u as parseSkill};

package/dist/server/plugins/sso/index.js

@@ -1 +1 @@
-import{DEFAULT_SSO_IDP_TITLE as A}from"../../../constants/common.js";import{envConfig as d}from"../../config/env-config.js";import{telemetryTraceStep as I}from"../../../cli/telemetry/helpers/trace-step.js";import{logger as C}from"../../tools/notifiers/logger.js";const O="https://auth.cloud.redocly.com/oidc/.well-known/openid-configuration",_="https://auth.cloud.redocly.com/api/sso/oidc/introspect";async function S(T){return{id:"sso",async processContent(i){await I("build.plugin.sso",async f=>{const o=i.getConfig(),s=o.access;if(f?.setAttribute("config",`{"ssoDirect": ${JSON.stringify(o.ssoDirect||{})}}, {"sso": ${JSON.stringify(s?.sso||{})}}, {"idps": ${JSON.stringify(s?.idps||{})}}`),o.ssoDirect&&typeof o.ssoDirect=="object"&&Object.keys(o.ssoDirect).length!==0)return;const y=!!s?.sso&&(Array.isArray(s.sso)?s.sso.length>0:!0),r=!!s?.idps&&(Array.isArray(s.idps)?s.idps.length>0:!0);if(s?.sso&&Array.isArray(s.sso)&&!s.sso.length&&!r)return;const g=!!(s?.rbac&&typeof s.rbac=="object"&&Object.keys(s.rbac).length!==0),u=s?.requiresLogin;if(!g&&!u)return;y&&r&&C.error("access.sso and access.idps both set \u2014 should have been rejected by config validation",{sso:s.sso,idps:s.idps});let c=O,a=d.REDOCLY_OAUTH_USE_INTROSPECT?_:"";const e=s?.residency;if(e){const l=e.endsWith("/")?e.slice(0,-1):e;c=`${l.replace("app.","auth.")}/oidc/.well-known/openid-configuration`,a=d.REDOCLY_OAUTH_USE_INTROSPECT?`${l}/api/sso/oidc/introspect`:""}let n="AUTO";s?.sso&&(Array.isArray(s.sso)?n=s.sso.join(","):n=s.sso);let t="";s?.idps&&(Array.isArray(s.idps)?t=s.idps.join(","):t=s.idps);const p={login_hint:"{{ process.env.ORGANIZATION_ID }}",login_type:n,prompt:"login"};t&&(p.login_idps=t);const m={oidc:{title:A,type:"OIDC",configurationUrl:c,clientId:"{{ process.env.OAUTH_CLIENT_ID }}",clientSecret:"{{ process.env.OAUTH_CLIENT_SECRET }}",teamsClaimName:"https://redocly.com/sso/teams",scopes:["openid"],authorizationRequestCustomParams:p,audience:"{{ process.env.ORGANIZATION_ID }}",introspectEndpoint:a}};i.setGlobalConfig({ssoDirect:m})})},async afterRoutesCreated(i){}}}export{S as ssoPlugin};
+import{DEFAULT_SSO_IDP_TITLE as A}from"../../../constants/common.js";import{envConfig as d}from"../../config/env-config.js";import{telemetryTraceStep as I}from"../../../cli/telemetry/helpers/trace-step.js";import{logger as C}from"../../tools/notifiers/logger.js";const O="https://auth.cloud.redocly.com/oidc/.well-known/openid-configuration",_="https://auth.cloud.redocly.com/api/sso/oidc/introspect";async function S(T){return{id:"sso",async processContent(i){await I("build.plugin.sso",async f=>{const o=i.getConfig(),s=o.access;if(f?.setAttribute("config",`{"ssoDirect": ${JSON.stringify(o.ssoDirect||{})}}, {"sso": ${JSON.stringify(s?.sso||{})}}, {"idps": ${JSON.stringify(s?.idps||{})}}`),o.ssoDirect&&typeof o.ssoDirect=="object"&&Object.keys(o.ssoDirect).length!==0)return;const y=!!s?.sso&&(Array.isArray(s.sso)?s.sso.length>0:!0),r=!!s?.idps&&(Array.isArray(s.idps)?s.idps.length>0:!0);if(s?.sso&&Array.isArray(s.sso)&&!s.sso.length&&!r)return;const g=!!(s?.rbac&&typeof s.rbac=="object"&&Object.keys(s.rbac).length!==0),u=s?.requiresLogin;if(!g&&!u)return;y&&r&&C.error("access.sso and access.idps both set \u2014 should have been rejected by config validation",{sso:s.sso,idps:s.idps});let c=O,a=d.REDOCLY_OAUTH_USE_INTROSPECT?_:"";const e=s?.residency;if(e){const l=e.endsWith("/")?e.slice(0,-1):e;c=`${l.replace("app.","auth.")}/oidc/.well-known/openid-configuration`,a=d.REDOCLY_OAUTH_USE_INTROSPECT?`${l}/api/sso/oidc/introspect`:""}let n="AUTO";s?.sso&&(Array.isArray(s.sso)?n=s.sso.join(","):n=s.sso);let t="";s?.idps&&(Array.isArray(s.idps)?t=s.idps.join(","):t=s.idps);const p={login_hint:"{{ process.env.ORGANIZATION_ID }}",login_type:n};t&&(p.login_idps=t);const m={oidc:{title:A,type:"OIDC",configurationUrl:c,clientId:"{{ process.env.OAUTH_CLIENT_ID }}",clientSecret:"{{ process.env.OAUTH_CLIENT_SECRET }}",teamsClaimName:"https://redocly.com/sso/teams",scopes:["openid"],authorizationRequestCustomParams:p,audience:"{{ process.env.ORGANIZATION_ID }}",introspectEndpoint:a}};i.setGlobalConfig({ssoDirect:m})})},async afterRoutesCreated(i){}}}export{S as ssoPlugin};

package/dist/server/sandbox/constants/host-functions.d.ts

@@ -0,0 +1,3 @@
+export declare const MAX_HOST_OUTPUT_BYTES: number;
+export declare const DEFAULT_GLOBAL_NAME = "hostFunctions";
+//# sourceMappingURL=host-functions.d.ts.map

package/dist/server/sandbox/constants/host-functions.js

@@ -0,0 +1 @@
+const o=1048576,t="hostFunctions";export{t as DEFAULT_GLOBAL_NAME,o as MAX_HOST_OUTPUT_BYTES};

package/dist/server/sandbox/constants/sandbox.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_TIMEOUT_MS = 10000;
+export declare const MEMORY_LIMIT_BYTES: number;
+export declare const DEFAULT_MAX_LIFETIME_MS: number;
+export declare const MAX_STACK_SIZE_BYTES: number;
+export declare const MAX_RESULT_BYTES: number;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/server/sandbox/constants/sandbox.js

@@ -0,0 +1 @@
+const _=1e4,E=67108864,T=6e5,o=262144,t=1048576;export{T as DEFAULT_MAX_LIFETIME_MS,_ as DEFAULT_TIMEOUT_MS,t as MAX_RESULT_BYTES,o as MAX_STACK_SIZE_BYTES,E as MEMORY_LIMIT_BYTES};

package/dist/server/sandbox/sandbox.d.ts

@@ -0,0 +1,8 @@
+import type { RunInSandboxOptions, SandboxResult } from './types.js';
+/**
+ * Evaluates `code` in a fresh, isolated QuickJS VM bounded by memory, stack, and time. The VM
+ * starts pristine — no host access of any kind. Consumers shape the guest realm through
+ * `setupContext` (see e.g. `setupHostFunctions`); the time bounds live in `createExecutionBudget`.
+ */
+export declare function runInSandbox(code: string, options?: RunInSandboxOptions): Promise<SandboxResult>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/server/sandbox/sandbox.js

@@ -0,0 +1,3 @@
+import f from"@jitl/quickjs-singlefile-mjs-release-sync";import{newQuickJSWASMModuleFromVariant as p}from"quickjs-emscripten-core";import{createExecutionBudget as E}from"./utils/execution-budget.js";import{DEFAULT_MAX_LIFETIME_MS as _,DEFAULT_TIMEOUT_MS as T,MAX_RESULT_BYTES as g,MAX_STACK_SIZE_BYTES as x,MEMORY_LIMIT_BYTES as y}from"./constants/sandbox.js";let c;function A(){return c??=p(f)}async function v(t,l={}){const{timeoutMs:m=T,maxLifetimeMs:d=_,setupContext:M}=l,e=(await A()).newContext();let n,s,r;try{e.runtime.setMemoryLimit(y),e.runtime.setMaxStackSize(x),n=E(e,m,d),s=M?.(e,n)??void 0,r=e.unwrapResult(e.evalCode(`(async () => {
+${t}
+})()`));const o=e.resolvePromise(r);e.runtime.executePendingJobs();const S=await Promise.race([o,n.aborted]),i=e.unwrapResult(S),u=e.dump(i);i.dispose();const a=JSON.stringify(u??null).length;return a>g?{error:`Result is too large (${a} bytes); return less data`}:{result:u}}catch(o){return{error:I(o)}}finally{n?.dispose(),r?.dispose();try{s?.()}catch{}try{e.dispose()}catch{c=void 0}}}function I(t){return t instanceof Error?t.message:String(t)}export{v as runInSandbox};

package/dist/server/sandbox/types.d.ts

@@ -0,0 +1,24 @@
+import type { QuickJSContext } from 'quickjs-emscripten-core';
+export type SandboxResult = {
+    result?: unknown;
+    error?: string;
+};
+export type ExecutionBudget = {
+    /**
+     * Run `work()` as a host call: its latency is exempt from the compute budget (`timeoutMs`).
+     * While the call is in flight the idle timer is paused, and the guest gets a fresh CPU
+     * deadline when it settles — so time spent off in the host isn't charged as guest compute.
+     */
+    hostCall<T>(work: () => Promise<T>): Promise<T>;
+    /** Rejects when a wall-clock deadline fires */
+    aborted: Promise<never>;
+    dispose(): void;
+};
+export type SetupSandboxContext = (context: QuickJSContext, budget: ExecutionBudget) => void | (() => void);
+export type RunInSandboxOptions = {
+    timeoutMs?: number;
+    maxLifetimeMs?: number;
+    setupContext?: SetupSandboxContext;
+};
+export type SandboxHostFunction = (input: unknown) => Promise<unknown> | unknown;
+//# sourceMappingURL=types.d.ts.map

package/dist/server/sandbox/utils/eval-guest-code.d.ts

@@ -0,0 +1,15 @@
+import type { QuickJSContext } from 'quickjs-emscripten-core';
+/**
+ * Evaluates guest source inside a QuickJS context for its side effects
+ *
+ * @param context - The QuickJS context to evaluate in
+ * @param source - Guest JavaScript source evaluated for side effects
+ * @throws When the source throws or fails to parse (unwrapped from the VM)
+ *
+ * @example
+ * ```ts
+ * evalGuestCode(context, 'globalThis.ctx = Object.freeze({ n: 41 });');
+ * ```
+ */
+export declare function evalGuestCode(context: QuickJSContext, source: string): void;
+//# sourceMappingURL=eval-guest-code.d.ts.map

package/dist/server/sandbox/utils/eval-guest-code.js

@@ -0,0 +1 @@
+function s(e,o){e.unwrapResult(e.evalCode(o)).dispose()}export{s as evalGuestCode};

package/dist/server/sandbox/utils/execution-budget.d.ts

@@ -0,0 +1,11 @@
+import type { ExecutionBudget } from '../types.js';
+import type { QuickJSContext } from 'quickjs-emscripten-core';
+/**
+ * Time-bounds a single sandbox run. Two deadlines — a refreshable per-stretch compute budget
+ * (`timeoutMs`) and a fixed whole-run ceiling (`maxLifetimeMs`) — are each enforced two ways,
+ * because the guest is only ever in one of two states and each enforcer reaches only one:
+ * - while the guest RUNS bytecode → the interrupt handler
+ * - while the guest is PARKED on an `await` → a wall-clock `setTimeout`
+ */
+export declare function createExecutionBudget(context: QuickJSContext, timeoutMs: number, maxLifetimeMs: number): ExecutionBudget;
+//# sourceMappingURL=execution-budget.d.ts.map

package/dist/server/sandbox/utils/execution-budget.js

@@ -0,0 +1 @@
+function f(a,t,i){const s=Date.now()+i;let c=Date.now()+t,l=()=>{};const d=new Promise((e,o)=>{l=r=>o(new Error(r))});let n;const u=()=>{clearTimeout(n),n=setTimeout(()=>l(`Execution timed out after ${t}ms`),t)};a.runtime.setInterruptHandler(()=>{const e=Date.now();return e>c||e>s}),u();const T=setTimeout(()=>l(`Exceeded the maximum lifetime of ${i}ms`),i);let m=0;return{hostCall:e=>{m++,clearTimeout(n);const o=()=>{a.alive&&(c=Date.now()+t,--m===0&&u())},r=e();return r.then(o,o),r},aborted:d,dispose(){clearTimeout(n),clearTimeout(T)}}}export{f as createExecutionBudget};

package/dist/server/sandbox/utils/setup-host-functions.d.ts

@@ -0,0 +1,18 @@
+import type { ExecutionBudget, SandboxHostFunction } from '../types.js';
+import type { QuickJSContext } from 'quickjs-emscripten-core';
+/**
+ * Optional adapter for `runInSandbox`'s `setupContext`: exposes named host functions to the
+ * guest as one frozen global — `hostFunctions` by default, or the `globalName` the consumer
+ * chooses. Values cross the boundary as JSON strings — the guest only ever receives copies.
+ * Returns the cleanup callback.
+ */
+export declare function setupHostFunctions(context: QuickJSContext, hostFunctions: Record<string, SandboxHostFunction>, options?: {
+    globalName?: string;
+    budget?: ExecutionBudget;
+    maxCalls?: number;
+    messages?: {
+        outputTooLarge?: (bytes: number) => string;
+        callLimitExceeded?: (max: number) => string;
+    };
+}): () => void;
+//# sourceMappingURL=setup-host-functions.d.ts.map

package/dist/server/sandbox/utils/setup-host-functions.js

@@ -0,0 +1,5 @@
+import{DEFAULT_GLOBAL_NAME as v,MAX_HOST_OUTPUT_BYTES as _}from"../constants/host-functions.js";import{evalGuestCode as E}from"./eval-guest-code.js";function w(e,o,s){const l=s?.globalName??v,u=s?.maxCalls,f=s?.messages?.outputTooLarge??(n=>`Host function output is too large (${n} bytes); request narrower data instead`),m=s?.messages?.callLimitExceeded??(n=>`Exceeded the limit of ${n} host calls`),d=s?.budget?.hostCall??(n=>n()),c=new Set;let S=0;return e.newFunction("__invoke",(n,a)=>{const h=e.getString(n),p=JSON.parse(e.getString(a)),r=e.newPromise();return c.add(r),u!==void 0&&++S>u?e.newError(m(u)).consume(r.reject):d(()=>Promise.resolve().then(()=>o[h](p))).then(t=>{if(!e.alive)return;let i;try{i=JSON.stringify(t??null)}catch(g){const b=g instanceof Error?g.message:String(g);e.newError(`Host function output is not serializable: ${b}`).consume(r.reject);return}i.length>_?e.newError(f(i.length)).consume(r.reject):e.newString(i).consume(r.resolve)},t=>{if(!e.alive)return;const i=t instanceof Error?t.message:String(t);e.newError(i).consume(r.reject)}),r.settled.then(()=>{e.alive&&e.runtime.executePendingJobs()}),r.handle}).consume(n=>e.setProp(e.global,"__invoke",n)),E(e,O(Object.keys(o),l)),function(){for(const a of c)a.alive&&a.dispose()}}function O(e,o){const s=e.map(l=>`${JSON.stringify(l)}: (input) => invoke(${JSON.stringify(l)}, JSON.stringify(input ?? {})).then(JSON.parse)`).join(", ");return`(() => {
+    const invoke = globalThis.__invoke;
+    delete globalThis.__invoke;
+    globalThis[${JSON.stringify(o)}] = Object.freeze({ ${s} });
+  })();`}export{w as setupHostFunctions};

package/dist/server/store.d.ts

@@ -2,6 +2,7 @@ import type { Node } from '@markdoc/markdoc';
 import type { JSX } from 'react';
 import type { CommonError, GlobalData } from '../types/index.js';
 import type { MiddlewareDetails, PageRouteInit, PageRouteDetails, RouteDetails, LifecycleContext, ApiRoute, ParseMarkdocOpts, WildcardRedirectsTree, RedirectOptions, McpToolRegistration, McpToolSchema, MarkdocOptions } from './types';
+import type { Skill } from './types/plugins/skills.js';
 import type { RedoclyConfig, RedirectConfig, CompilationError, PageStaticData } from '@redocly/config';
 import type { SearchFacet } from '@redocly/theme/core/types';
 import type { BundledDefinition as OpenApiBundledDefinition } from './plugins/openapi-docs/load-definition.js';
@@ -55,6 +56,7 @@ export declare class Store {
     browserPlugins: Set<string>;
     apiRoutesRequestHandlers: Map<string, string>;
     mcpToolHandlers: Map<string, McpToolRegistration>;
+    skills: Map<string, Skill>;
     serverPropsGetters: Map<string, string>;
     pagePropsGetters: Map<string, string>;
     listeners: Map<string, Set<(...args: any[]) => void>>;
@@ -127,6 +129,8 @@ export declare class Store {
     addApiRoute: (route: ApiRoute) => void;
     addMcpTools: (importPath: string, tools: McpToolSchema[]) => void;
     getMcpTools: () => McpToolRegistration[];
+    addSkills: (skills: Skill[]) => void;
+    getSkills: () => Skill[];
     addMiddleware: (middleware: MiddlewareDetails) => void;
     setResourceResponseHeaders: (resourcePath: string, headers: NonNullable<RedoclyConfig['responseHeaders']>[string]) => void;
     getRouteByFsPath: (relativePath: string) => PageRouteDetails | undefined;