npm - @redocly/realm - Versions diffs - 0.136.0-next.1 → 0.136.0-next.11 - Mend

@redocly/realm 0.136.0-next.1 → 0.136.0-next.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (540) hide show

package/dist/server/plugins/mcp/handlers/mcp-credentials-handler.js ADDED Viewed

@@ -0,0 +1,120 @@
+import{secretStore as s}from"../gateway-mcp/secret-store.js";import{buildAllowedHostMatchers as C}from"../gateway-mcp/fetch/allowed-hosts.js";import{assertUrlAllowed as P}from"../gateway-mcp/fetch/ssrf-guard.js";import{readCappedBody as I,getDefaultAgent as E}from"../gateway-mcp/fetch/fetch-bridge.js";const p={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'"},_=3e4,T=64*1024;let k=fetch;function Y(e){k=e}const R=async(e,t)=>{const n=await t.getKv();if(e.method==="GET"){const o=new URL(e.url).searchParams.get("token")??"",r=await s.peekElicitation(n,o);return r?new Response(q(r,o),{status:200,headers:p}):u()}if(e.method==="POST"){const o=await e.formData(),r=String(o.get("token")??""),m=String(o.get("mode")??"token");return m==="client-credentials"?O(n,o,r):m==="clear"?F(n,r):z(n,o,r)}return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, POST"}})};async function z(e,t,n){const o=String(t.get("secret")??"");if(!o)return u();const r=await s.consumeElicitation(e,n);return r?(await s.setSecret(e,r.subject,r.api,B(r.auth,o)),new Response(x(r.name),{status:200,headers:p})):u()}async function F(e,t){const n=await s.consumeElicitation(e,t);return n?(await s.deleteSecret(e,n.subject,n.api),new Response(D(n.name),{status:200,headers:p})):u()}async function O(e,t,n){const o=String(t.get("client_id")??"").trim(),r=String(t.get("client_secret")??"").trim();if(!o||!r)return u();const m=await s.peekElicitation(e,n);if(!m||m.auth.kind!=="oauth2ClientCredentials")return u();const i=await s.consumeElicitation(e,n);if(!i||i.auth.kind!=="oauth2ClientCredentials")return u();const b=i.auth;try{const A=C([{url:b.tokenUrl}]),$=P(b.tokenUrl,A),v=new AbortController,S=setTimeout(()=>v.abort(),_);let y;try{y=await k($,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials",client_id:o,client_secret:r,...b.scopes.length>0?{scope:b.scopes.join(" ")}:{}}),redirect:"manual",signal:v.signal,dispatcher:E()})}finally{clearTimeout(S)}if(!y.ok)return f(i.name);let w;try{w=await I(y,T)}catch{return f(i.name)}let h;try{h=JSON.parse(w)}catch{return f(i.name)}const g=typeof h=="object"&&h!==null&&"access_token"in h?h.access_token:void 0;return typeof g!="string"||!g?f(i.name):(await s.setSecret(e,i.subject,i.api,{header:"Authorization",value:`Bearer ${g}`}),new Response(x(i.name),{status:200,headers:p}))}catch{return f(i.name)}}function B(e,t){return e.kind==="apiKey"?{header:e.header,value:t}:e.kind==="bearer"||e.kind==="oauth2ClientCredentials"?{header:"Authorization",value:j(t)}:{header:"Authorization",value:t}}function j(e){const t=e.trim();return t.toLowerCase().startsWith("bearer")?t:`Bearer ${t}`}function a(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function c(e){return`<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="robots" content="noindex">
+<title>API credentials</title>
+<style>
+:root{color-scheme:light dark}
+*{box-sizing:border-box}
+body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#f3f4f6;color:#111827;padding:1.5rem}
+.card{width:100%;max-width:26rem;background:#ffffff;border-radius:.75rem;box-shadow:0 10px 25px -5px rgba(0,0,0,.1),0 8px 10px -6px rgba(0,0,0,.1);padding:2rem}
+h1{font-size:1.25rem;margin:0 0 .5rem}
+.section{margin-top:1.5rem;padding-top:1.5rem;border-top:1px solid #e5e7eb}
+.section h2{font-size:1rem;margin:0 0 .5rem}
+p.hint{color:#6b7280;font-size:.875rem;line-height:1.4}
+label{display:block;margin:1rem 0 .25rem;font-weight:600;font-size:.875rem}
+input[type=password],input[type=text]{width:100%;padding:.625rem .75rem;font-size:1rem;border:1px solid #d1d5db;border-radius:.5rem;background:#fff;color:#111827}
+input:focus{outline:none;border-color:#4f46e5;box-shadow:0 0 0 3px rgba(79,70,229,.2)}
+button{margin-top:1.25rem;padding:.625rem 1.5rem;font-size:1rem;font-weight:600;color:#fff;background:#4f46e5;border:none;border-radius:.5rem;cursor:pointer}
+button:hover{background:#4338ca}
+button:focus-visible{outline:2px solid #4f46e5;outline-offset:2px}
+button.danger{background:#b91c1c}
+button.danger:hover{background:#991b1b}
+button.danger:focus-visible{outline-color:#b91c1c}
+code{background:#f3f4f6;padding:.125rem .375rem;border-radius:.25rem;font-size:.85em}
+footer{margin-top:1.5rem;padding-top:1rem;border-top:1px solid #e5e7eb;font-size:.75rem;color:#9ca3af;text-align:center}
+@media (prefers-color-scheme:dark){
+body{background:#0b0f19;color:#e5e7eb}
+.card{background:#111827;box-shadow:0 10px 25px -5px rgba(0,0,0,.4)}
+.section{border-top-color:#1f2937}
+p.hint{color:#9ca3af}
+input[type=password],input[type=text]{background:#0b0f19;border-color:#374151;color:#e5e7eb}
+code{background:#1f2937}
+footer{border-top-color:#1f2937;color:#6b7280}
+}
+</style>
+</head>
+<body><div class="card">${e}</div></body>
+</html>`}function d(e){return`<h1>\u{1F512} ${a(e)}</h1>`}function l(){return"<footer>Secured by Redocly &middot; credentials never enter the AI conversation</footer>"}function q(e,t){const n=e.hasExistingSecret?H(t):"";switch(e.auth.kind){case"bearer":return N(e.name,t,n);case"apiKey":return U(e.name,t,e.auth.header,n);case"oauth2ClientCredentials":return K(e.name,t,e.auth.scopes,n);default:return M(e.name,t,n)}}function H(e){return`
+<div class="section">
+<h2>Remove stored credentials</h2>
+<p class="hint">This API already has credentials stored. Save above to replace them, or remove them to make calls anonymous again.</p>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(e)}">
+<input type="hidden" name="mode" value="clear">
+<button class="danger" type="submit">Remove credentials</button>
+</form>
+</div>`}function N(e,t,n){return c(`
+${d(`Credentials for ${e}`)}
+<p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(t)}">
+<input type="hidden" name="mode" value="token">
+<label for="secret">API token</label>
+<input type="password" id="secret" name="secret" placeholder="your API token" required autofocus>
+<p class="hint">Paste the raw token or one already prefixed with <code>Bearer</code> &mdash; we add the prefix automatically if it is missing.</p>
+<button type="submit">Save credentials</button>
+</form>
+${n}
+${l()}`)}function U(e,t,n,o){return c(`
+${d(`Credentials for ${e}`)}
+<p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>${a(n)}</code> header. It never passes through the AI conversation.</p>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(t)}">
+<input type="hidden" name="mode" value="token">
+<label for="secret">${a(n)} value</label>
+<input type="password" id="secret" name="secret" placeholder="value" required autofocus>
+<button type="submit">Save credentials</button>
+</form>
+${o}
+${l()}`)}function K(e,t,n,o){const r=n.length>0?n.map(a).join(", "):"default scopes";return c(`
+${d(`Credentials for ${e}`)}
+<p class="hint">Paste a token you already have, or let us exchange client credentials for one via OAuth2 client_credentials.</p>
+<div class="section">
+<h2>I have a token</h2>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(t)}">
+<input type="hidden" name="mode" value="token">
+<label for="secret">API token</label>
+<input type="password" id="secret" name="secret" placeholder="your API token" required autofocus>
+<p class="hint">We add <code>Bearer</code> automatically if it is missing.</p>
+<button type="submit">Save token</button>
+</form>
+</div>
+<div class="section">
+<h2>Exchange client credentials</h2>
+<p class="hint">We request a token from the API on your behalf. Scopes: ${r}.</p>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(t)}">
+<input type="hidden" name="mode" value="client-credentials">
+<label for="client_id">Client ID</label>
+<input type="text" id="client_id" name="client_id" required>
+<label for="client_secret">Client secret</label>
+<input type="password" id="client_secret" name="client_secret" required>
+<button type="submit">Exchange &amp; save</button>
+</form>
+</div>
+${o}
+${l()}`)}function M(e,t,n){return c(`
+${d(`Credentials for ${e}`)}
+<p class="hint">The value is stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and is sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
+<form method="post" action="/mcp/credentials" autocomplete="off">
+<input type="hidden" name="token" value="${a(t)}">
+<input type="hidden" name="mode" value="token">
+<label for="secret">Authorization header value</label>
+<input type="password" id="secret" name="secret" placeholder="Bearer &lt;your token&gt;" required autofocus>
+<button type="submit">Save credentials</button>
+</form>
+${n}
+${l()}`)}function D(e){return c(`
+${d("Credentials removed")}
+<p>The stored credentials for ${a(e)} are gone. Calls to that API are anonymous again until you add new ones.</p>
+${l()}`)}function x(e){return c(`
+${d("Credentials saved")}
+<p>Credentials for ${a(e)} are set for this session. Return to your AI client and continue - confirm the elicitation prompt if it is still open.</p>
+${l()}`)}function f(e){return new Response(c(`
+${d("Exchange failed")}
+<p>We could not exchange your client credentials for a token for ${a(e)}. This link has been used up - go back to your AI client and request a new link, then try again.</p>
+${l()}`),{status:502,headers:p})}function u(){return new Response(c(`${d("Link expired")}<p>This credentials link is invalid or has expired. Retry the request in your AI client to get a fresh link.</p>${l()}`),{status:404,headers:p})}var J=R;export{J as default,Y as setCredentialsFetchImpl};

package/dist/server/plugins/mcp/index.d.ts CHANGED Viewed

@@ -1,5 +1,6 @@
 import type { LifecyclePluginInstance } from '../../types';
 export declare const MCP_DOCS_SERVER_HANDLER_ID = "mcp-docs-server-handler";
+export declare const MCP_CREDENTIALS_HANDLER_ID = "mcp-credentials-handler";
 export declare function mcpServerPlugin(): Promise<LifecyclePluginInstance>;
 export default mcpServerPlugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/mcp/index.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{fileURLToPath as O}from"node:url";import{dirname as T,join as c}from"node:path";import{logger as g}from"../../tools/notifiers/logger.js";import{reporter as A}from"../../tools/notifiers/reporter.js";import{isDefined as R}from"../../../utils/guards/is-defined.js";import{buildGraphqlDescriptions as w,filterIgnoredApiDescriptions as u,getCleanedUpApiDescriptions as L,isMcpInRedirects as q}from"./utils.js";import{~~isMcpCodeModeEnabled~~ as G}from"./utils/mode.js";import{getDefaultToolSchemas as N}from"./docs-mcp/tool-schemas.js";import{EXECUTE_TOOL_SCHEMA as j}from"./codemode/tools/execute-schema.js";import{isGatewayCapabilityEnabled as U,isGatewayEligible as H}from"./gateway-mcp/eligibility.js";import{telemetryTraceStep as I}from"../../../cli/telemetry/helpers/trace-step.js";import{DEFAULT_DOCS_MCP_SERVER_NAME as F,MCP_NOT_ALLOWED_TEMPLATE_ID as x}from"./constants.js";const h="mcp-docs-server-handler",V="/mcp",p=T(O(import.meta.url));async function B(){let r=!1;return{id:"mcp",async processContent(i,o){r\|\|await I("build.plugin.mcp",async a=>{const s=await i.~~loadOpenApiDefinitions~~(o),l=await i.~~loadGraphqlDefinitions~~(o),n=await o.getConfig(),{mcp:t,redirects:D}=n;if(a?.setAttribute("config",JSON.stringify(t\|\|{})),!(t?.hide\|\|t?.docs?.hide)&&(q(D)&&await A.panicOnBuildContentError('The reserved route "/mcp" cannot be used in redirect configuration. Please remove any redirects involving "/mcp" from your redocly.yaml config.'),i.createTemplate(x,"@redocly/theme/layouts/McpNotAllowed"),!t?.docs?.hide)){g.info("Configuring MCP servers...");const C=c(p,"./handlers/docs-mcp-handler.js"),E=L(u(s,t?.docs?.ignore\|\|[])),M=!!n?.access?.requiresLogin,d=n?.access?.rbac\|\|{},v=U(t),m=new Map;for(const e of E){const b=e.definition.info?.title\|\|"",S=e.definition.info?.version\|\|"";m.set(e.relativePath,{name:b,description:e.definition.info?.description\|\|"",version:S,servers:e.definition.servers\|\|[],relativePath:e.relativePath,...v&&H(e.definition.info,e.relativePath,d)?{fetchEligible:!0}:{}})}const f=w(u(l,t?.docs?.ignore\|\|[])),y=Object.values(n.products\|\|{}).map(e=>e?.name).filter(R),P=n.l10n?.locales?.map(e=>e.code)??o.fs.localeFolders,_=N({products:y,locales:P,requiresLogin:M,rbac:d,hasGraphqlApis:f.length>0});i.addMcpTools(c(p,"./docs-mcp/tools/index.js"),_),~~G()~~&&i.addMcpTools(c(p,"./codemode/tools/execute.js"),[j]),await J({actions:i,handlerPath:C,apiDescriptionsMap:Object.fromEntries(m),graphqlDescriptions:f,mcpConfig:t}),r=!0}})},async afterRoutesCreated(i,o){const a=await o.getConfig(),{mcp:s}=a;i.setGlobalData({mcpData:{docs:{enabled:!s?.hide&&!s?.docs?.hide,name:s?.docs?.name}}})}}}var te=B;async function J({actions:r,handlerPath:i,apiDescriptionsMap:o,graphqlDescriptions:a,mcpConfig:s}){r.createRequestHandler(h,i),r.addApiRoute({slug:V,requestHandlerId:h,httpMethod:"all",getStaticData:async()=>({props:{config:{apiDescriptionsMap:o,graphqlDescriptions:a,mcpDocsServerName:s?.docs?.name\|\|F},serverOutDir:r.serverOutDir,tools:r.getMcpTools().map(({importPath:l,...n})=>n)}})}),g.info("Registered Docs MCP Server endpoint at /mcp")}export{h as MCP_DOCS_SERVER_HANDLER_ID,te as default,B as mcpServerPlugin};
1	+ import{fileURLToPath as w}from"node:url";import{dirname as q,join as p}from"node:path";import{logger as f}from"../../tools/notifiers/logger.js";import{reporter as G}from"../../tools/notifiers/reporter.js";import{isDefined as N}from"../../../utils/guards/is-defined.js";import{bundledOpenApiDocumentsToMcpOpenApi as H,bundledGraphqlDocumentsToMcpOpenApi as I,buildGraphqlDescriptions as U,filterIgnoredApiDescriptions as M,getCleanedUpApiDescriptions as j,isMcpInRedirects as x}from"./utils.js";import{getMcpMode as F,isMcpElicitationEnabled as B}from"./utils/mode.js";import{getDefaultToolSchemas as V}from"./docs-mcp/tool-schemas.js";import{EXECUTE_TOOL_SCHEMA as J}from"./codemode/tools/execute-schema.js";import{isGatewayCapabilityEnabled as W,isGatewayEligible as X}from"./gateway-mcp/eligibility.js";import{resolveGatewayFetchLimits as k}from"./gateway-mcp/rate-limit/limits.js";import{telemetryTraceStep as z}from"../../../cli/telemetry/helpers/trace-step.js";import{DEFAULT_DOCS_MCP_SERVER_NAME as C,MCP_NOT_ALLOWED_TEMPLATE_ID as K}from"./constants.js";const P="mcp-docs-server-handler",Q="/mcp",_="mcp-credentials-handler",Y="/mcp/credentials",d=q(w(import.meta.url));async function Z(){let i=!1;return{id:"mcp",async processContent(t,r){i\|\|await z("com.redocly.build.plugin.mcp",async c=>{const s=H(await t.loadApiDocuments(r)),l=I(await t.loadApiDocuments(r)),n=await r.getConfig(),{mcp:o,redirects:a}=n;if(c?.setAttribute("config",JSON.stringify(o\|\|{})),!(o?.hide\|\|o?.docs?.hide)&&(x(a)&&await G.panicOnBuildContentError('The reserved route "/mcp" cannot be used in redirect configuration. Please remove any redirects involving "/mcp" from your redocly.yaml config.'),t.createTemplate(K,"@redocly/theme/layouts/McpNotAllowed"),!o?.docs?.hide)){f.info("Configuring MCP servers...");const m=p(d,"./handlers/docs-mcp-handler.js"),y=j(M(s,o?.docs?.ignore\|\|[])),v=!!n?.access?.requiresLogin,u=n?.access?.rbac\|\|{},A=W(o),g=new Map;for(const e of y){const O=e.definition.info?.title\|\|"",L=e.definition.info?.version\|\|"";g.set(e.relativePath,{name:O,description:typeof e.definition.info?.description=="string"?e.definition.info.description:"",version:L,servers:e.definition.servers\|\|[],relativePath:e.relativePath,...A&&X(e.definition.info,e.relativePath,u)?{fetchEligible:!0}:{}})}const h=U(M(l,o?.docs?.ignore\|\|[])),b=Object.values(n.products\|\|{}).map(e=>e?.name).filter(N),R=n.l10n?.locales?.map(e=>e.code)??r.fs.localeFolders,D=F(),E=B(),{budgetPerExec:S}=k(),T=V({products:b,locales:R,requiresLogin:v,rbac:u,hasGraphqlApis:h.length>0,elicitationEnabled:E});t.addMcpTools(p(d,"./docs-mcp/tools/index.js"),T),D==="code"&&t.addMcpTools(p(d,"./codemode/tools/execute.js"),[J]),await $({actions:t,handlerPath:m,apiDescriptionsMap:Object.fromEntries(g),graphqlDescriptions:h,mcpConfig:o,mcpMode:D,elicitationEnabled:E,gatewayFetchBudgetPerExec:S}),i=!0}})},async afterRoutesCreated(t,r){const c=await r.getConfig(),{mcp:s}=c;t.setGlobalData({mcpData:{docs:{enabled:!s?.hide&&!s?.docs?.hide,name:s?.docs?.name\|\|C}}})}}}var fe=Z;async function $({actions:i,handlerPath:t,apiDescriptionsMap:r,graphqlDescriptions:c,mcpConfig:s,mcpMode:l,elicitationEnabled:n,gatewayFetchBudgetPerExec:o}){if(i.createRequestHandler(P,t),i.addApiRoute({slug:Q,requestHandlerId:P,httpMethod:"all",getStaticData:async()=>({props:{config:{apiDescriptionsMap:r,graphqlDescriptions:c,mcpDocsServerName:s?.docs?.name\|\|C,mcpMode:l,elicitationEnabled:n,gatewayFetchBudgetPerExec:o},serverOutDir:i.serverOutDir,tools:i.getMcpTools().map(({importPath:a,...m})=>m)}})}),f.info("Registered Docs MCP Server endpoint at /mcp"),n){const a=p(d,"./handlers/mcp-credentials-handler.js");i.createRequestHandler(_,a),i.addApiRoute({slug:Y,requestHandlerId:_,httpMethod:"all",getStaticData:async()=>({props:{}})}),f.info("Registered MCP credentials endpoint at /mcp/credentials")}}export{_ as MCP_CREDENTIALS_HANDLER_ID,P as MCP_DOCS_SERVER_HANDLER_ID,fe as default,Z as mcpServerPlugin};

package/dist/server/plugins/mcp/servers/docs-server.d.ts CHANGED Viewed

@@ -1,10 +1,12 @@
 import type { McpToolSchema } from '../../../types';
 import type { McpToolContext, SkillMcpResource } from '../types.js';
+import type { KvService } from '@redocly/config';
 import { type McpServerInstance } from './mcp-server.js';
-export declare function createDocsMcpServer({ name, tools, context, skills }: {
+export declare function createDocsMcpServer({ name, tools, context, skills, getKv, }: {
     name: string;
     tools: McpToolSchema[];
     context: McpToolContext;
     skills?: SkillMcpResource[];
+    getKv: () => Promise<KvService>;
 }): Promise<McpServerInstance>;
 //# sourceMappingURL=docs-server.d.ts.map

package/dist/server/plugins/mcp/servers/docs-server.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{logger as O}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as _,MCP_TOOL_IS_AVAILABLE_KEY as u}from"../../../workers/mcp-tool-worker-pool.js";import{EXECUTE_TOOL_SCHEMA as C}from"../codemode/tools/execute-schema.js";import{EXECUTE_TOOL_NAME as p,DESCRIBE_TOOLS_TOOL_NAME as M,CODE_MODE_TOOL_NAMES as b,FETCH_TOOL_NAME as S}from"../codemode/constants.js";import{buildCodeModeInstructions as A,buildExecuteDescription as h,DESCRIBE_TOOLS_DESCRIPTION as x}from"../codemode/prompts.js";import{composeExecuteAnnotations as L,getActiveCapabilities as D}from"../codemode/capabilities/index.js";import{describeToolsSchema as v,describeTools as y}from"../codemode/tools/describe-tools.js";import{~~isMcpCodeModeEnabled~~ as g}from"../utils/~~mode~~.js";import{connectMcpServer as I,createMcpServer as k,createToolDispatch as w,extractSerializableContext as N}from"./mcp-server.js";async function K({name:E,tools:a,context:i,skills:d=[]}){const n=~~g()~~,r=n?D(i):[],s=r.some(e=>e.id===S),{server:o,transport:f}=k(E,n?A(s):void 0),c=N(i),m=w(c),l=async e=>{try{return await _.exec(u,[{toolName:e,context:c}],{timeout:1e4})}catch(t){return O.error(`Failed to check MCP tool availability for "${e}": ${t instanceof Error?t.message:String(t)}`),!1}};if(n){const e=a.filter(t=>!b.has(t.name));o.~~tool~~(p,h(s),~~C.schema,L~~(r),m(p)),o.~~tool~~(M,x,v(e,r),y(e,l,r,i))}else await Promise.all(a.map(async e=>{const t=e.~~annotations\|\|~~{~~title~~:e.~~name}~~,~~T=o.tool~~(e.~~name~~,e.~~description,~~e.~~schema~~,~~t,m~~(e.name));await l(e.name)\|\|T.disable()}));for(const e of d)o.registerResource(e.slug,e.uri,{title:e.name,description:e.description,mimeType:"text/markdown"},async()=>({contents:[{uri:e.uri,mimeType:"text/markdown",text:e.content}]}));return I(o,f)}export{K as createDocsMcpServer};
1	+ import{fromJsonSchema as C}from"@modelcontextprotocol/server";import{logger as A}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as b,MCP_TOOL_IS_AVAILABLE_KEY as g}from"../../../workers/mcp-tool-worker-pool.js";import{CREATE_ANONYMOUS_SESSION_TOOL_NAME as M}from"../constants.js";import{isAnonymousSessionToolAvailable as T}from"../docs-mcp/tools/core/create-anonymous-session.js";import{isManageApiCredentialsToolAvailable as v,manageApiCredentials as L,manageApiCredentialsSchema as D}from"../codemode/tools/manage-credentials.js";import{EXECUTE_TOOL_SCHEMA as y}from"../codemode/tools/execute-schema.js";import{EXECUTE_TOOL_NAME as h,DESCRIBE_TOOLS_TOOL_NAME as I,CODE_MODE_TOOL_NAMES as N,FETCH_TOOL_NAME as H}from"../codemode/constants.js";import{buildCodeModeInstructions as k,buildExecuteDescription as w,DESCRIBE_TOOLS_DESCRIPTION as x}from"../codemode/prompts.js";import{composeExecuteAnnotations as F,getActiveCapabilities as R}from"../codemode/capabilities/index.js";import{describeToolsSchema as P,describeTools as B}from"../codemode/tools/describe-tools.js";import{mcpJsonSchemaValidator as U}from"../utils/json-schema-validator.js";import{connectMcpServer as z,createMcpServer as J,createToolDispatch as V,extractSerializableContext as X}from"./mcp-server.js";function Y(s){const t=y.schema;if(T(s))return t;const{sessionHandle:i,...c}=t.properties;return{...t,properties:c}}function $(s,t){const i=t.schema;if(T(s))return i;const{sessionHandle:c,...l}=i.properties;return{...i,properties:l}}async function se({name:s,tools:t,context:i,skills:c=[],getKv:l}){const m=i.mcpMode==="code",p=m?R(i):[],u=p.some(e=>e.id===H),O=m&&v(i),{server:r,transport:_}=J(s,m?k(u):void 0),a=e=>C(e,U),d=X(i),E={getClientCapabilities:()=>r.server.getClientCapabilities(),getKv:l},f=V(d,E),S=async e=>{try{return await b.exec(g,[{toolName:e,context:d}],{timeout:1e4})}catch(o){return A.error(`Failed to check MCP tool availability for "${e}": ${o instanceof Error?o.message:String(o)}`),!1}};if(m){const e=t.filter(n=>!N.has(n.name));r.registerTool(h,{description:w(u),inputSchema:a(Y(i)),annotations:F(p)},f(h)),r.registerTool(I,{description:x,inputSchema:a(P(e,p))},B(e,S,p,i));const o=t.find(n=>n.name===M);if(o&&T(i)&&r.registerTool(o.name,{description:o.description,inputSchema:a(o.schema),annotations:o.annotations??{title:o.name}},f(o.name)),O){const n=D(i);r.registerTool(n.name,{description:n.description,inputSchema:a($(i,n)),annotations:n.annotations??{title:n.name}},L(d,E))}}else await Promise.all(t.map(async e=>{const o=r.registerTool(e.name,{description:e.description,inputSchema:a(e.schema),annotations:e.annotations\|\|{title:e.name}},f(e.name));await S(e.name)\|\|o.disable()}));for(const e of c)r.registerResource(e.slug,e.uri,{title:e.name,description:e.description,mimeType:"text/markdown"},async()=>({contents:[{uri:e.uri,mimeType:"text/markdown",text:e.content}]}));return z(r,_)}export{se as createDocsMcpServer};

package/dist/server/plugins/mcp/servers/mcp-server.d.ts CHANGED Viewed

@@ -1,18 +1,25 @@
-import { McpServer } from '@redocly/mcp-typescript-sdk/server/mcp.js';
-import { StreamableHTTPServerTransport } from '@redocly/mcp-typescript-sdk/server/streamableHttp.js';
-import type { ToolCallback } from '@redocly/mcp-typescript-sdk/server/mcp.js';
-import type { McpToolContext } from '../types.js';
+import { McpServer, WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/server';
+import type { McpToolCallback, McpToolContext } from '../types.js';
+import type { KvService } from '@redocly/config';
 export type McpServerInstance = {
     server: McpServer;
-    transport: StreamableHTTPServerTransport;
+    transport: WebStandardStreamableHTTPServerTransport;
     cleanup: () => Promise<void>;
 };
 export declare function createMcpServer(name: string, instructions?: string): {
     server: McpServer;
-    transport: StreamableHTTPServerTransport;
+    transport: WebStandardStreamableHTTPServerTransport;
+};
+export declare function connectMcpServer(server: McpServer, transport: WebStandardStreamableHTTPServerTransport): Promise<McpServerInstance>;
+export type ToolDispatchDeps = {
+    getClientCapabilities: () => {
+        elicitation?: {
+            url?: unknown;
+        };
+    } | undefined;
+    getKv: () => Promise<KvService>;
 };
-export declare function connectMcpServer(server: McpServer, transport: StreamableHTTPServerTransport): Promise<McpServerInstance>;
 /** Build the tool callback that ships a tool call to the worker pool. */
-export declare function createToolDispatch(serializableContext: McpToolContext): (toolName: string) => ToolCallback<Record<string, unknown>>;
+export declare function createToolDispatch(serializableContext: McpToolContext, deps?: ToolDispatchDeps): (toolName: string) => McpToolCallback;
 export declare function extractSerializableContext(context: McpToolContext): McpToolContext;
 //# sourceMappingURL=mcp-server.d.ts.map

package/dist/server/plugins/mcp/servers/mcp-server.js CHANGED Viewed

@@ -1 +1,3 @@
-import{McpServer as i}from"@redocly/mcp-typescript-sdk/server/mcp.js";import{StreamableHTTPServerTransport as t}from"@redocly/mcp-typescript-sdk/server/streamableHttp.js";import{logger as n}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as c,MCP_TOOL_WORKER_KEY as u}from"../../../workers/mcp-tool-worker-pool.js";const p=6e4;function T(e,r){const o=new i({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...r?{instructions:r}:{}}),a=new t({sessionIdGenerator:void 0});return{server:o,transport:a}}async function g(e,r){return await e.connect(r),{server:e,transport:r,cleanup:async()=>{r.close()}}}function S(e){return r=>async(o,a)=>{n.info(`MCP tool called: ${r}`);const s={toolName:r,args:o,context:e,extra:l(a)};return await c.exec(u,[s],{timeout:p})}}function l(e){return{sessionId:e.sessionId,authInfo:e.authInfo,requestId:e.requestId,requestInfo:e.requestInfo,_meta:e._meta}}function q(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization}}export{g as connectMcpServer,T as createMcpServer,S as createToolDispatch,q as extractSerializableContext};
+import{McpServer as T,WebStandardStreamableHTTPServerTransport as q}from"@modelcontextprotocol/server";import{logger as b}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as v,MCP_TOOL_WORKER_KEY as I}from"../../../workers/mcp-tool-worker-pool.js";import{SSE_KEEPALIVE_INTERVAL_MS as R}from"../constants.js";import{secretStore as _}from"../gateway-mcp/secret-store.js";import{readAuthRequiredMeta as A,stripAuthRequiredMeta as h}from"../gateway-mcp/upstream-auth.js";import{buildCredentialsToolHint as O,buildUpstreamCredentialFallback as w,buildUpstreamCredentialInputRequired as U,isCredentialElicitationDeclined as D,targetOf as C}from"../gateway-mcp/elicitation.js";import{resolveUpstreamAuthScheme as K}from"../gateway-mcp/upstream-auth-scheme.js";import{MISSING_SESSION_HANDLE_MESSAGE as P,resolveSecretSubject as j}from"../gateway-mcp/subject.js";const L=6e4,g=new Map;function x(e,t){const r=g.get(e);if(r)return r;const n=t().finally(()=>{g.delete(e)});return g.set(e,n),n}function z(e,t){const r=new T({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...t?{instructions:t}:{}}),n=new q({keepAliveMs:R,sessionIdGenerator:void 0});return{server:r,transport:n}}async function ee(e,t){return await e.connect(t),{server:e,transport:t,cleanup:async()=>{t.close()}}}function te(e,t){return r=>async(n,a)=>{b.info(`MCP tool called: ${r}`);const i=e.elicitationEnabled??!1,u=a.mcpReq.envelope!==void 0,o=i?j(e.user,n.sessionHandle):{kind:"anonymous"},s=o.kind==="resolved"?o.subject:void 0;if(o.kind==="invalid")return{content:[{type:"text",text:o.message}],isError:!0};const d=async()=>{if(!(!i||!s||!t?.getKv))try{const c=await t.getKv();return await _.getSecretsForSubject(c,s)}catch(c){b.warn(`gateway mcp secret store error, continuing unauthenticated: ${String(c)}`);return}};let m;const S=async()=>{m=await d();const c={toolName:r,args:n,context:{...e,upstreamSecrets:m},extra:$(a)};return await v.exec(I,[c],{timeout:L})};let p=await S();const l=A(p);if(l.length>0&&i&&!s)return h({...p,content:[{type:"text",text:P}],isError:!0});if(l.length>0&&i&&s&&t?.getKv){const c=await t.getKv(),E=new Set(Object.keys(m??{})),f=u?await H(e,a,l,s,c,E,t):await N(e,l,s,c,E);switch(f.kind){case"inputRequired":return f.result;case"retry":p=await S();break;case"appendText":p={...p,content:[...p.content,{type:"text",text:f.text}]};break;case"none":break}}return h(p)}}function F(e){return!!e?.getClientCapabilities()?.elicitation?.url}function k(e,t){return e.status===401&&!t.has(e.api)}function y(e){return e.map(O).join(`
+`)}async function M(e,t,r,n){const[a,...i]=t;return{subject:r,baseUrl:e.baseUrl??"",target:C(a),auth:await K(e,a.api),kv:n,hasExistingSecret:!1,reason:{kind:"authFailure",status:a.status,otherApiNames:i.map(u=>u.name)}}}async function H(e,t,r,n,a,i,u){if(D(t.mcpReq.inputResponses))return{kind:"none"};const o=r.filter(d=>k(d,i));if(o.length===0)return{kind:"appendText",text:y(r)};const s=await M(e,o,n,a);return F(u)?{kind:"inputRequired",result:await U(s)}:{kind:"appendText",text:await w(s)}}async function N(e,t,r,n,a){const i=t.filter(s=>k(s,a));if(i.length===0)return{kind:"appendText",text:y(t)};const u=await M(e,i,r,n);return{kind:"appendText",text:await x(`${r}:${i[0].api}`,()=>w(u))}}function $(e){return{sessionId:e.sessionId,authInfo:e.http?.authInfo,requestId:e.mcpReq.id,_meta:e.mcpReq._meta}}function re(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization,mcpMode:e.mcpMode,elicitationEnabled:e.elicitationEnabled,gatewayFetchBudgetPerExec:e.gatewayFetchBudgetPerExec,clientIp:e.clientIp,upstreamSecrets:e.upstreamSecrets}}export{ee as connectMcpServer,z as createMcpServer,te as createToolDispatch,re as extractSerializableContext};

package/dist/server/plugins/mcp/types.d.ts CHANGED Viewed

@@ -1,11 +1,10 @@
-import type { OpenAPIOperation, OpenAPIPath } from '@redocly/openapi-docs/src/types';
 import type { ApiFunctionsContext, ApiFunctionsContextMethods, PageStaticData } from '@redocly/config';
-import type { CallToolResult, RequestId, RequestInfo, RequestMeta } from '@redocly/mcp-typescript-sdk/types.js';
-import type { AuthInfo } from '@redocly/mcp-typescript-sdk/server/types.js';
-import type { OpenAPIServer } from '@redocly/openapi-docs/lib/types/open-api.js';
+import type { AuthInfo, CallToolResult, RequestId, RequestMeta, StandardSchemaWithJSON, ToolCallback } from '@modelcontextprotocol/server';
+import type { OpenAPIPath, OpenAPIServer, OpenAPIOperation } from '@redocly/api-docs';
 import type { McpErrorCodes, McpServerType } from './constants';
 import type { McpToolSchema } from '../../types';
 import type { Skill } from '../../types/plugins/skills.js';
+import type { StoredSecret } from './gateway-mcp/secret-store.js';
 type ObjectValues<T> = T[keyof T];
 export type McpServerType = ObjectValues<typeof McpServerType>;
 export type McpErrorCodeTypes = ObjectValues<typeof McpErrorCodes>;
@@ -26,6 +25,9 @@ export type McpDocsStaticDataPropsConfig = {
     mcpDocsServerName: string;
     apiDescriptionsMap: Record<string, ApiDescriptionInfo>;
     graphqlDescriptions: GraphqlDescriptionInfo[];
+    mcpMode: McpMode;
+    elicitationEnabled: boolean;
+    gatewayFetchBudgetPerExec: number;
 };
 export type McpDocsStaticData = PageStaticData & {
     props: {
@@ -59,18 +61,6 @@ export type McpEndpoint = OpenAPIOperation & {
     'x-mcp'?: XMcpConfig;
 };
 export type McpMode = 'tools' | 'code';
-export type McpPluginConfig = {
-    readonly hide: boolean;
-    readonly docs: {
-        readonly hide: boolean;
-        readonly name: string;
-        readonly ignore: readonly string[];
-    };
-    readonly gateway?: {
-        readonly hide: boolean;
-        readonly allowedHosts?: readonly string[];
-    };
-};
 export type McpUserInfo = {
     email?: string;
     name?: string;
@@ -88,11 +78,12 @@ export type SemanticSearchResult = {
     content: string;
 };
 export type McpToolWorkerResponse = CallToolResult;
+export type ToolArgs = Record<string, unknown>;
+export type McpToolCallback = ToolCallback<StandardSchemaWithJSON<ToolArgs, ToolArgs>>;
 export type McpToolExtra = {
     sessionId?: string;
     authInfo?: AuthInfo;
     requestId: RequestId;
-    requestInfo?: RequestInfo;
     _meta?: RequestMeta;
 };
 export type McpToolContext = Omit<ApiFunctionsContext, 'telemetry' | 'getKv' | keyof ApiFunctionsContextMethods> & {
@@ -102,16 +93,21 @@ export type McpToolContext = Omit<ApiFunctionsContext, 'telemetry' | 'getKv' | k
     accessToken?: string;
     metadata?: Record<string, unknown>;
     upstreamAuthorization?: string;
+    mcpMode?: McpMode;
+    elicitationEnabled?: boolean;
+    gatewayFetchBudgetPerExec?: number;
+    clientIp?: string;
+    upstreamSecrets?: Record<string, StoredSecret>;
 };
-export type McpToolHandler<TArgs extends Record<string, unknown> = Record<string, unknown>> = (args: TArgs, context: McpToolContext, extra: McpToolExtra) => Promise<McpToolWorkerResponse>;
+export type McpToolHandler<TArgs extends ToolArgs = ToolArgs> = (args: TArgs, context: McpToolContext, extra: McpToolExtra) => Promise<McpToolWorkerResponse>;
 export type McpToolIsAvailable = (context: McpToolContext) => boolean | Promise<boolean>;
-export type McpToolHandlerExtended<TArgs extends Record<string, unknown> = Record<string, unknown>> = {
+export type McpToolHandlerExtended<TArgs extends ToolArgs = ToolArgs> = {
     execute: McpToolHandler<TArgs>;
     isAvailable?: McpToolIsAvailable;
 };
 export type McpToolExecutionParams = {
     toolName: string;
-    args: Record<string, unknown>;
+    args: ToolArgs;
     context: McpToolContext;
     extra: McpToolExtra;
 };

package/dist/server/plugins/mcp/utils/json-schema-validator.d.ts ADDED Viewed

@@ -0,0 +1,9 @@
+import { AjvJsonSchemaValidator } from '@modelcontextprotocol/server/validators/ajv';
+/**
+ * Validates tool arguments with the same engine and options the forked SDK
+ * (@redocly/mcp-typescript-sdk) used internally, so migrating to the upstream
+ * v2 SDK does not change which arguments are accepted. The SDK default would
+ * be a lenient draft-2020-12 engine instead.
+ */
+export declare const mcpJsonSchemaValidator: AjvJsonSchemaValidator;
+//# sourceMappingURL=json-schema-validator.d.ts.map

package/dist/server/plugins/mcp/utils/json-schema-validator.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ import{AjvJsonSchemaValidator as o}from"@modelcontextprotocol/server/validators/ajv";import r from"@redocly/ajv";const t=new o(new r({allErrors:!0}));export{t as mcpJsonSchemaValidator};

package/dist/server/plugins/mcp/utils/jwt.d.ts CHANGED Viewed

@@ -1,14 +1,5 @@
-import type { McpUserInfo } from '../types';
 /**
  * Extract JWT token from Authorization header
  */
 export declare function extractTokenFromAuthHeader(authHeader?: string | string[]): string | null;
-/**
- * Decode and validate JWT token to get user information
- */
-export declare function getUserInfoFromToken(token: string): McpUserInfo | null;
-/**
- * Get user info from MCP request headers
- */
-export declare function getUserInfoFromHeaders(headers: Record<string, string | string[] | undefined>): McpUserInfo | null;
 //# sourceMappingURL=jwt.d.ts.map

package/dist/server/plugins/mcp/utils/jwt.js CHANGED Viewed

	@@ -1 +1 @@
1	- ~~import*as t from"../../../web-server/jwt/jwt.js";~~function n(e){if(!e)return null;const r=Array.isArray(e)?e[0]:e;return!r\|\|!r.startsWith("Bearer ")?null:r.replace(/^Bearer /,"")}function u(e){try{const{payload:r}=t.decode(e),o=Math.floor(Date.now()/1e3);return typeof r.exp=="number"&&r.exp<o?null:r}catch(r){return console.error("Failed to decode JWT token:",r),null}}function a(e){const r=e.authorization\|\|e.Authorization,o=n(r);return o?u(o):null}export{n as extractTokenFromAuthHeader~~,a as getUserInfoFromHeaders,u as getUserInfoFromToken~~};
1	+ function n(r){if(!r)return null;const e=Array.isArray(r)?r[0]:r;return!e\|\|!e.startsWith("Bearer ")?null:e.replace(/^Bearer /,"")}export{n as extractTokenFromAuthHeader};

package/dist/server/plugins/mcp/utils/mode.d.ts CHANGED Viewed

@@ -1,7 +1,17 @@
 import type { McpMode } from '../types.js';
-/** Codemode - `execute` sandbox and `describeTools`. */
+/**
+ * Codemode - `execute` sandbox and `describeTools`. Gated by the org-level `mcpMode`
+ * entitlement (GrowthBook `mcp-mode` flag → PLAN_GATES JWT).
+ *
+ * Read the VALUE, never `canAccessFeature('mcpMode')` — 'tools' is truthy.
+ * Only call these helpers where EntitlementsProvider is initialized: the build lifecycle
+ * and web-server routes. Request handlers and workers run in module graphs with an
+ * UNINITIALIZED provider copy — they must read the build-stamped `mcpMode` from static
+ * data / McpToolContext instead (see docs-mcp-handler / execute-mcp-tool).
+ */
 export declare function isMcpCodeModeEnabled(): boolean;
-/** The gateway capability — a guarded `fetch` in the `execute` sandbox. Requires codemode to be on. */
+/** The gateway capability — a guarded `fetch` in the `execute` sandbox. Requires code mode. */
 export declare function isMcpGatewayEnabled(): boolean;
+export declare function isMcpElicitationEnabled(): boolean;
 export declare function getMcpMode(): McpMode;
 //# sourceMappingURL=mode.d.ts.map

package/dist/server/plugins/mcp/utils/mode.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{~~envConfig~~ as e}from"../../../~~config~~/~~env~~-~~config~~.js";function o(){return e.~~REDOCLY_EXP_MCP_CODE_MODE_ENABLED??!1~~}function n(){return(e.~~REDOCLY_EXP_MCP_GATEWAY_SERVER_ENABLED??!1~~)&&o()}function t(){return o()?"code":"tools"}export{t as getMcpMode,o as isMcpCodeModeEnabled,n as isMcpGatewayEnabled};
1	+ import{EntitlementsProvider as e}from"../../../entitlements/entitlements-provider.js";function t(){return e.instance().entitlements?.mcpMode==="code"}function n(){return!!e.instance().canAccessFeature("mcpGateway")&&t()}function c(){return n()}function r(){return t()?"code":"tools"}export{r as getMcpMode,t as isMcpCodeModeEnabled,c as isMcpElicitationEnabled,n as isMcpGatewayEnabled};

package/dist/server/plugins/mcp/utils/telemetry-attributes.d.ts ADDED Viewed

@@ -0,0 +1,8 @@
+import type { McpServerType } from '../types.js';
+/** CloudEvent resource attributes shared by every `mcpServer` telemetry event. */
+export declare function serverAttributes(serverType: McpServerType): {
+    id: "docs";
+    object: 'mcpServer';
+    uri: string;
+};
+//# sourceMappingURL=telemetry-attributes.d.ts.map

package/dist/server/plugins/mcp/utils/telemetry-attributes.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ function e(r){return{id:r,object:"mcpServer",uri:`urn:redocly:realm:mcp:server:${r}`}}export{e as serverAttributes};

package/dist/server/plugins/mcp/utils/xmcp-utils.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { OpenAPIDefinition } from '@redocly/openapi-docs';
+import type { OpenAPIDefinition } from '@redocly/api-docs';
 import type { XMcpConfig, XMcpSection } from '../types.js';
 /**
  * Returns false when the endpoint is hidden for `section`; otherwise strips x-mcp from the

package/dist/server/plugins/mcp/utils.d.ts CHANGED Viewed

@@ -1,8 +1,20 @@
+import type { DocumentNode } from 'graphql';
 import type { ApiFunctionsUser, RbacConfig, RedirectConfig } from '@redocly/config';
-import type { ProcessContentActions } from '../../types';
-import type { BundledDefinition as GraphqlBundledDefinition } from '../../plugins/graphql-docs/graphql-doc-loader';
 import type { ApiDescriptionInfo, GraphqlDescriptionInfo } from './types.js';
-export type ApiDescriptions = Awaited<ReturnType<ProcessContentActions['loadOpenApiDefinitions']>>;
+import type { OpenAPIDefinition } from '@redocly/api-docs';
+import type { BundledApiDefinition } from '../api-docs/loader.js';
+/** OpenAPI specs only; MCP lists paths/servers from OpenAPI documents. */
+export type McpOpenApiSpec = {
+    relativePath: string;
+    definition: OpenAPIDefinition;
+};
+export type McpGraphqlSpec = {
+    relativePath: string;
+    definition: DocumentNode;
+    options: BundledApiDefinition['options'];
+};
+export declare function bundledOpenApiDocumentsToMcpOpenApi(bundled: BundledApiDefinition[]): McpOpenApiSpec[];
+export declare function bundledGraphqlDocumentsToMcpOpenApi(bundled: BundledApiDefinition[]): McpGraphqlSpec[];
 /**
  * Filters out localizations and definitions with no public paths.
  *
@@ -19,7 +31,7 @@ export type ApiDescriptions = Awaited<ReturnType<ProcessContentActions['loadOpen
  *   { relativePath: 'api.yaml', definition: { paths: { '/users': {} } } }
  * ]); // Returns only the api.yaml definition
  */
-export declare function getCleanedUpApiDescriptions(apiDescriptions: ApiDescriptions): ApiDescriptions;
+export declare function getCleanedUpApiDescriptions(apiDescriptions: McpOpenApiSpec[]): McpOpenApiSpec[];
 /**
  * Filters OpenAPI definitions based on user RBAC permissions.
  *
@@ -39,7 +51,7 @@ export declare function getCleanedUpApiDescriptions(apiDescriptions: ApiDescript
  */
 export declare function filterApiDescriptionsByRbac(apiDescriptions: Record<string, ApiDescriptionInfo>, user: ApiFunctionsUser, rbac: RbacConfig, requiresLogin: boolean): Record<string, ApiDescriptionInfo>;
 export declare function filterGraphqlDescriptionsByRbac(graphqlDescriptions: GraphqlDescriptionInfo[], user: ApiFunctionsUser, rbac: RbacConfig, requiresLogin: boolean): GraphqlDescriptionInfo[];
-export declare function buildGraphqlDescriptions(definitions: GraphqlBundledDefinition[]): GraphqlDescriptionInfo[];
+export declare function buildGraphqlDescriptions(definitions: McpGraphqlSpec[]): GraphqlDescriptionInfo[];
 export declare function filterIgnoredApiDescriptions<T extends {
     relativePath: string;
 }>(apiDescriptions: T[], ignoredPaths: string[]): T[];

package/dist/server/plugins/mcp/utils.js CHANGED Viewed

	@@ -1 +1 @@
1	- import f,{join as a}from"node:path";import u from"picomatch";import{PUBLIC_API_DEFINITIONS_FOLDER as h,L10N_DIR_NAME as o,I18N_DIR_NAME as s}from"../../constants/common.js";import{RESERVED_ROUTES as l}from"../../plugins/get-reserved-routes.js";import{canDownloadApiDefinition as m}from"../../utils/rbac.js";function p(r){if(typeof r!="object"\|\|r===null)return r;if(Array.isArray(r))return r.map(p);const i={};for(const t in r)if(Object.hasOwn(r,t)){if(t.toString().startsWith("x-parsed-"))continue;i[t]=p(r[t])}return i}function x(r){return r.reduce((i,t)=>(t.relativePath.startsWith(o)\|\|t.relativePath.startsWith(s)\|\|t.definition?.paths&&Object.keys(t.definition.paths).length>0&&i.push({...t,definition:p(t.definition)}),i),[])}function R(r,i,~~t,e~~){const n={};for(const[D,c]of Object.entries(r))m(a(h,c.relativePath),t,e,i)&&(n[D]=c);return n}function g(r,i,~~t,e~~){return r.filter(n=>m(a(h,n.relativePath),t,e,i))}function E(r){return r.filter(({relativePath:i})=>!i.startsWith(o)&&!i.startsWith(s)).map(({relativePath:i,~~settings~~:t})=>({name:t.info?.title\|\|f.basename(i,f.extname(i)),description:t.info?.description,relativePath:i}))}function _(r,i){return r.filter(({relativePath:t})=>!u(i\|\|[])(t))}function W(r={}){for(const[i,t]of Object.entries(r))if(i===l.mcp\|\|(typeof t=="string"?t:t.to)===l.mcp)return!0;return!1}function b(r,i,t){return r.startsWith(o)\|\|r.startsWith(s)\|\|!i?.paths\|\|Object.keys(i.paths).length===0?!1:!u(t?.docs?.ignore\|\|[])(r)}export{E as buildGraphqlDescriptions,R as filterApiDescriptionsByRbac,g as filterGraphqlDescriptionsByRbac,_ as filterIgnoredApiDescriptions,x as getCleanedUpApiDescriptions,b as isApiIncludedInDocsMcp,W as isMcpInRedirects};
1	+ import a,{join as f}from"node:path";import u from"picomatch";import{PUBLIC_API_DEFINITIONS_FOLDER as l,L10N_DIR_NAME as o,I18N_DIR_NAME as p}from"../../constants/common.js";import{RESERVED_ROUTES as h}from"../../plugins/get-reserved-routes.js";import{canDownloadApiDefinition as m}from"../../utils/rbac.js";function x(e){return e.filter(t=>t.type==="openapi").map(t=>({relativePath:t.relativePath,definition:t.document}))}function g(e){return e.filter(t=>t.type==="graphql").map(t=>({relativePath:t.relativePath,definition:t.document,options:t.options}))}function s(e){if(typeof e!="object"\|\|e===null)return e;if(Array.isArray(e))return e.map(s);const t={};for(const i in e)if(Object.hasOwn(e,i)){if(i.toString().startsWith("x-parsed-"))continue;t[i]=s(e[i])}return t}function P(e){return e.reduce((t,i)=>(i.relativePath.startsWith(o)\|\|i.relativePath.startsWith(p)\|\|!i.definition\|\|typeof i.definition!="object"\|\|!("paths"in i.definition)\|\|i.definition?.paths&&Object.keys(i.definition.paths).length>0&&t.push({...i,definition:s(i.definition)}),t),[])}function R(e,t,i,r){const n={};for(const[d,c]of Object.entries(e))m(f(l,c.relativePath),i,r,t)&&(n[d]=c);return n}function E(e,t,i,r){return e.filter(n=>m(f(l,n.relativePath),i,r,t))}function _(e){return e.filter(({relativePath:t})=>!t.startsWith(o)&&!t.startsWith(p)).map(({relativePath:t,options:i})=>({name:i.info?.title\|\|a.basename(t,a.extname(t)),description:i.info?.description,relativePath:t}))}function W(e,t){return e.filter(({relativePath:i})=>!u(t\|\|[])(i))}function b(e={}){for(const[t,i]of Object.entries(e))if(t===h.mcp\|\|(typeof i=="string"?i:i.to)===h.mcp)return!0;return!1}function M(e,t,i){return e.startsWith(o)\|\|e.startsWith(p)\|\|!t?.paths\|\|Object.keys(t.paths).length===0?!1:!u(i?.docs?.ignore\|\|[])(e)}export{_ as buildGraphqlDescriptions,g as bundledGraphqlDocumentsToMcpOpenApi,x as bundledOpenApiDocumentsToMcpOpenApi,R as filterApiDescriptionsByRbac,E as filterGraphqlDescriptionsByRbac,W as filterIgnoredApiDescriptions,P as getCleanedUpApiDescriptions,M as isApiIncludedInDocsMcp,b as isMcpInRedirects};

package/dist/server/plugins/mcp/workers/execute-mcp-tool.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{telemetry as d}from"../../../telemetry/index.js";import{mcpToolHandlers as w}from"../../../../client/mcp-tool-handlers-entry.js";import{~~getMcpMode~~ as h}from"../~~utils/mode~~.js";import{~~McpServerType~~ as i}from"../constants.js";import{reportMcpToolCalled as x,reportMcpToolError as u}from"./mcp-tool-telemetry.js";async function A(r){d.initialize();const{toolName:o,args:l,context:f,extra:t}=r,a=~~h()~~,n=performance.now();try{const e=w[o];if(!e)throw new Error(`Unknown MCP tool: ${o}`);const{default:M}=await e(),c=M[o];if(!c)throw new Error(`MCP tool module does not export a handler for "${o}". Expected \`export default { '${o}': handler }\`.`);const s=await(typeof c=="function"?c:c.execute)(l,f,t);if(!g(s))throw new Error(`MCP tool "${o}" returned an invalid result.`);const m=Math.round(performance.now()-n);if(s.isError)u({tool:o,message:~~s.content.map~~(~~({text:p}~~)~~=>p)~~.join(" "),mode:a,serverType:i.Docs,durationMs:m});else{const p=~~s.content.map~~(~~({text:y}~~)~~=>y)~~.join("").length;x({tool:o,mode:a,serverType:i.Docs,durationMs:m,outputLength:p})}return s}catch(e){throw u({tool:o,message:e instanceof Error?e.message:String(e),mode:a,serverType:i.Docs,durationMs:Math.round(performance.now()-n),stack:e instanceof Error&&e.stack\|\|""}),e}}function g(r){return!r\|\|typeof r!="object"?!1:Array.isArray(r.content)}async function j(r){d.initialize();const{toolName:o,context:l}=r,f=performance.now();try{const t=w[o];if(!t)return!1;const{default:a}=await t(),n=a[o];return n?typeof n=="object"&&typeof n.isAvailable=="function"?await n.isAvailable(l):!0:!1}catch(t){throw u({tool:o,message:"Failed to check if MCP tool is available: "+(t instanceof Error?t.message:String(t)),mode:~~h()~~,serverType:i.Docs,durationMs:Math.round(performance.now()-f),stack:t instanceof Error&&t.stack\|\|""}),t}}export{A as executeMcpTool,j as isMcpToolAvailable};
1	+ import{telemetry as m}from"../../../telemetry/index.js";import{mcpToolHandlers as d}from"../../../../client/mcp-tool-handlers-entry.js";import{McpServerType as f}from"../constants.js";import{EXECUTE_TOOL_NAME as y}from"../codemode/constants.js";import{reportMcpToolCalled as x,reportMcpToolError as p}from"./mcp-tool-telemetry.js";function w(e){return e.content.map(o=>o.type==="text"?o.text:"")}async function _(e){m.initialize();const{toolName:o,args:c,context:i,extra:r}=e,s=i?.mcpMode??"tools",n=performance.now();try{const t=d[o];if(!t)throw new Error(`Unknown MCP tool: ${o}`);const{default:h}=await t(),l=h[o];if(!l)throw new Error(`MCP tool module does not export a handler for "${o}". Expected \`export default { '${o}': handler }\`.`);const a=await(typeof l=="function"?l:l.execute)(c,i,r);if(!E(a))throw new Error(`MCP tool "${o}" returned an invalid result.`);const u=Math.round(performance.now()-n);if(a.isError)p({tool:o,message:w(a).join(" "),mode:s,serverType:f.Docs,durationMs:u,errorClass:o===y?"sandbox_error":"tool_error"});else{const M=w(a).join("").length;x({tool:o,mode:s,serverType:f.Docs,durationMs:u,outputLength:M})}return a}catch(t){throw p({tool:o,message:t instanceof Error?t.message:String(t),mode:s,serverType:f.Docs,durationMs:Math.round(performance.now()-n),stack:t instanceof Error&&t.stack\|\|"",errorClass:"server_error"}),t}}function E(e){return!e\|\|typeof e!="object"?!1:Array.isArray(e.content)}async function k(e){m.initialize();const{toolName:o,context:c}=e,i=performance.now();try{const r=d[o];if(!r)return!1;const{default:s}=await r(),n=s[o];return n?typeof n=="object"&&typeof n.isAvailable=="function"?await n.isAvailable(c):!0:!1}catch(r){throw p({tool:o,message:"Failed to check if MCP tool is available: "+(r instanceof Error?r.message:String(r)),mode:c?.mcpMode??"tools",serverType:f.Docs,durationMs:Math.round(performance.now()-i),stack:r instanceof Error&&r.stack\|\|"",errorClass:"server_error"}),r}}export{_ as executeMcpTool,k as isMcpToolAvailable};

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.d.ts CHANGED Viewed

@@ -5,12 +5,20 @@ type McpToolEvent = {
     serverType: McpServerType;
     durationMs: number;
 };
-export declare function reportMcpToolCalled({ tool, mode, serverType, durationMs, outputLength }: McpToolEvent & {
+/**
+ * Who an error belongs to. `tool_error` — the caller asked for something that does not exist or
+ * does not validate. `sandbox_error` — the model's own generated code threw in code mode.
+ * `server_error` — Redocly code failed. Reported explicitly so consumers never have to infer it
+ * from whether a stack trace happens to be attached.
+ */
+export type McpErrorClass = 'tool_error' | 'sandbox_error' | 'server_error';
+export declare function reportMcpToolCalled({ tool, mode, serverType, durationMs, outputLength, }: McpToolEvent & {
     outputLength: number;
 }): void;
-export declare function reportMcpToolError({ tool, mode, serverType, durationMs, message, stack }: McpToolEvent & {
+export declare function reportMcpToolError({ tool, mode, serverType, durationMs, message, stack, errorClass, }: McpToolEvent & {
     message: string;
     stack?: string;
+    errorClass: McpErrorClass;
 }): void;
 export {};
 //# sourceMappingURL=mcp-tool-telemetry.d.ts.map

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{telemetry as c}from"../../../telemetry/index.js";~~function~~ l~~(r){return{id:r,object:~~"~~mcpServer~~"~~,uri:`urn:redocly:realm:mcp:server:${r}`,server_type:r}}~~function s({tool:r,mode:e,serverType:o,durationMs:t,outputLength:n}){c.sendMcpToolCalledMessage([{...l(o),tool:r,mode:e,output_length:n,duration_ms:t}])}function i({tool:r,mode:e,serverType:o,durationMs:t,message:n,stack:p=""}){c.sendMcpErrorMessage([{...l(o),tool:r,message:n,stack:p,mode:e,duration_ms:t}])}export{s as reportMcpToolCalled,i as reportMcpToolError};
1	+ import{telemetry as p}from"../../../telemetry/index.js";import{serverAttributes as l}from"../utils/telemetry-attributes.js";function m({tool:r,mode:o,serverType:e,durationMs:t,outputLength:s}){p.sendMcpToolCalledMessage([{...l(e),tool:r,mode:o,output_length:s,duration_ms:t}])}function u({tool:r,mode:o,serverType:e,durationMs:t,message:s,stack:n="",errorClass:a}){p.sendMcpErrorMessage([{...l(e),tool:r,message:s,stack:n,error_class:a,mode:o,duration_ms:t}])}export{m as reportMcpToolCalled,u as reportMcpToolError};

package/dist/server/plugins/openapi-docs/index.js CHANGED Viewed

	@@ -1 +1 @@
1	- import{simplifyAstStructure as Z}from"@redocly/openapi-docs";import{REDOCLY_ROUTE_RBAC as y,REDOCLY_TEAMS_RBAC as D}from"@redocly/config";import{OPENAPI_DOCS_TEMPLATE_ID as j,PUBLIC_RBAC_SCOPE_ITEM as U}from"../../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as ee,PUBLIC_API_DEFINITIONS_FOLDER as te}from"../../constants/common.js";import{OPENAPI_SHARED_DATA_PREFIX as L}from"../../constants/plugins/openapi-docs.js";import{envConfig as V}from"../../config/env-config.js";import{isRbacScopeItems as oe}from"../../utils/rbac/is-rbac-scope-items.js";import{getRouteSlugsForPath as ae}from"../utils.js";import{searchResolver as re}from"./search/search-resolver.js";import{convertOpenAPIDocs2Sidebar as ie,shouldAddRoute as se}from"./utils.js";import{getTemplatePath as q}from"./get-template-path.js";import{storeDefinitionBundles as ne}from"./store-definition-bundles.js";import{definitionLoader as pe,definitionsLoader as ce}from"./load-definition.js";import{getAiDocumentsStore as de}from"./search/get-ai-search-documents.js";import{fromCurrentDir as le}from"../../utils/paths.js";import{telemetryTraceStep as fe}from"../../../cli/telemetry/helpers/trace-step.js";import{getApiConfigByPath as ue}from"../get-api-config.js";import{shouldAdvertiseGatewayXMcp as me,buildGatewayXMcp as ge}from"../mcp/gateway-mcp/eligibility.js";const x="openapi-spec-download";async function Be(){let k=[],C={},N=new Set,d={};return{id:"openapi",requiredEntitlements:["openapi"],loaders:{"load-oas-docs":ce,"load-oas":pe},processContent:async(e,n)=>{await fe("build.plugin.~~openapi_docs~~",async l=>{e.createRequestHandler(x,le(import.meta.url,"./spec-download.api.js")),e.addApiRoute({slug:te+"/",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})}),e.addApiRoute({slug:ee+"/",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})});const E=e.createTemplate(j,q("../../../client/templates/openapi-docs/template.js")),f=e.registerServerPropsGetter(j,q("./get-server-props.js")),u=await n.getConfig();l?.setAttribute("config",JSON.stringify(u.openapi\|\|{})),C={},d={};const p=await e.~~loadOpenApiDefinitions~~(n);k=p.map(({markdocChunks:a,relativePath:o,customOutputRelativeFile:r,isVirtual:i,realRelativePath:m})=>({chunks:a,relativePath:o,realRelativePath:m,isVirtual:r!=null\|\|i})),ne(p,e.outdir);for(const a of p\|\|[]){const{definition:o,config:r,relativePath:i,customOutputRelativeFile:m,contentItems:_,flatItems:g,parser:h,options:I,rawOptions:v,hash:R}=a,S=m\|\|i,s=[],G={},{definition:X}=h\|\|{},{info:c}=X\|\|{},O=c?.["x-metadata"],w=!!r.openapi?.excludeFromSearch\|\|!!r.theme?.openapi?.excludeFromSearch\|\|!!u.openapi?.excludeFromSearch\|\|!!u.theme?.openapi?.excludeFromSearch,H={title:c?.title,description:c?.description,summary:c?.summary,...r.metadata,...O},P={untagged:[],tagged:new Map};for(const t of g){const{id:F,href:A,operationDefinition:T}=t;if(T){const{tags:b}=T;if(b)for(const B of b)P.tagged.has(B)\|\|P.tagged.set(B,[]),P.tagged.get(B)?.push(t);else P.untagged.push(t);V.isDevelopMode&&(G[`#${T.pointer}`]=t.href)}if(!se({item:t}))continue;const M=t,Q=M.type==="section"&&!!M.infoDefinition,W=A.split("#")[0]+"/",z=t?.operationDefinition?.[D],K=oe(r.access?.rbac)?r.access.rbac:void 0;s.push({excludeFromSearch:w,slugSuffix:W,fsPath:S,metadata:{subType:"openapi-operation"},httpVerb:t?.httpVerb\|\|"",path:i,templateId:E,[D]:z\|\|K,getAiDocumentsStore:de({parser:h,options:I,info:c,tagOperations:P,openapiContentItem:M,metadata:H,relativePath:i,getSearchFacets:e.getSearchFacets,includeInLLMsTxt:Q,excludeFromSearch:w}),getStaticData:async b=>({props:{dynamicMarkdocComponents:["openapi"],baseSlug:b.baseSlug,seo:t["x-metadata"]?.seo\|\|{title:t.name,description:t.description},itemId:F,disableAutoScroll:!0}})})}if(s[0]={...s[0],metadata:{type:"openapi",...H},hasClientRoutes:!0,getSidebar:(t,F)=>{const A=[];return ie({contentItems:_,sidebarItems:A,routeSlug:t.slug,navItem:F}),A},getNavText:()=>c?.title,getSearchDocuments:re(h,I,g,e.getSearchFacets,e.setSearchFacets,w)},O?.apiId&&!a.isVirtual){const t=ue(a.config.apis,a.realRelativePath);d[O.apiId]={[D]:t.rbac,[y]:{fsPath:S}}}const Y=s[0];s[0]=s[s.length-1],s[s.length-1]=Y;for(const t of s)e.addRoute({...t,serverPropsGetterIds:[f]});const J=V.isDevelopMode?i:void 0,$=`${L}${i}`;C[$]={fsPath:S,definition:o,options:v,sourcePath:J,routesMapping:G,hash:R};for(const t of s)e.addRoute({...t,sharedData:[{id:$,key:"openAPIDocsStore"}],serverPropsGetterIds:[f]})}})},afterRoutesCreated:async(e,n)=>{const l=new Set;for(const{chunks:a,relativePath:o,isVirtual:r,realRelativePath:i}of k){const m=ae(e.getAllRoutes(),o),_=(await n.cache.load(i,"load-oas")).compoundHash;await n.cache.load(o,{loader:async function(){for(const{node:h,markdown:I,key:v,relativePath:R}of a){const{ast:S}=await e.parseMarkdoc({input:{content:I,relativePath:R,isVirtual:r},context:n,deps:{sharedDataIds:[`${L}${R}`],routeSlugs:m}});h[`x-parsed-md-${v}`]={result:Z(S)}}},name:"openapi-markdoc-inline-parser"},[_]);for(const{pointer:g}of a)l.add(g)}const E=N.difference(l);for(const a of E)n.cache.delete(a);N=l;const f=e.getConfig(),u=f.access?.rbac??{},p=n.withPathPrefix("/mcp");for(const[a,o]of Object.entries(C)){const r=e.getRouteByFsPath(o.fsPath)?.baseSlug,i=r&&me(o.definition,a.slice(L.length),u,f.mcp)?{...o.definition,"x-mcp":{...ge(p),...o.definition["x-mcp"],servers:[{url:p}]}}:o.definition;await e.createSharedData(a,{...o,definition:i,baseSlug:r},o.hash)}Object.entries(d).forEach(([a,o])=>{const r=o[y]?.fsPath;if(!r)return;const i=e.getRouteByFsPath(r)?.baseSlug;d[a]={...o,[y]:{...o[y],slug:i},slug:i}}),e.setGlobalData({apiProducts:d})}}}export{Be as openAPIDocsPlugin};
1	+ import{simplifyAstStructure as Z}from"@redocly/openapi-docs";import{REDOCLY_ROUTE_RBAC as y,REDOCLY_TEAMS_RBAC as D}from"@redocly/config";import{OPENAPI_DOCS_TEMPLATE_ID as j,PUBLIC_RBAC_SCOPE_ITEM as U}from"../../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as ee,PUBLIC_API_DEFINITIONS_FOLDER as te}from"../../constants/common.js";import{OPENAPI_SHARED_DATA_PREFIX as L}from"../../constants/plugins/openapi-docs.js";import{envConfig as V}from"../../config/env-config.js";import{isRbacScopeItems as oe}from"../../utils/rbac/is-rbac-scope-items.js";import{getRouteSlugsForPath as ae}from"../utils.js";import{searchResolver as re}from"./search/search-resolver.js";import{convertOpenAPIDocs2Sidebar as se,shouldAddRoute as ie}from"./utils.js";import{getTemplatePath as q}from"./get-template-path.js";import{storeDefinitionBundles as ne}from"./store-definition-bundles.js";import{definitionLoader as ce,definitionsLoader as pe}from"./load-definition.js";import{getAiDocumentsStore as de}from"./search/get-ai-search-documents.js";import{fromCurrentDir as le}from"../../utils/paths.js";import{telemetryTraceStep as fe}from"../../../cli/telemetry/helpers/trace-step.js";import{getApiConfigByPath as ue}from"../get-api-config.js";import{shouldAdvertiseGatewayXMcp as me,buildGatewayXMcp as ge}from"../mcp/gateway-mcp/eligibility.js";const x="openapi-spec-download";async function Be(){let k=[],C={},N=new Set,d={};return{id:"openapi",requiredEntitlements:["openapi"],loaders:{"load-oas-docs":pe,"load-oas":ce},processContent:async(e,n)=>{await fe("com.redocly.build.plugin.openapiDocs",async l=>{e.createRequestHandler(x,le(import.meta.url,"./spec-download.api.js")),e.addApiRoute({slug:te+"/",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})}),e.addApiRoute({slug:ee+"/",requestHandlerId:x,httpMethod:"all",[D]:U,getStaticData:async()=>({props:{}})});const E=e.createTemplate(j,q("../../../client/templates/openapi-docs/template.js")),f=e.registerServerPropsGetter(j,q("./get-server-props.js")),u=await n.getConfig();l?.setAttribute("config",JSON.stringify(u.openapi\|\|{})),C={},d={};const c=(await n.cache.load(".","load-oas-docs")).data;k=c.map(({markdocChunks:a,relativePath:o,customOutputRelativeFile:r,isVirtual:s,realRelativePath:m})=>({chunks:a,relativePath:o,realRelativePath:m,isVirtual:r!=null\|\|s})),ne(c,e.outdir);for(const a of c\|\|[]){const{definition:o,config:r,relativePath:s,customOutputRelativeFile:m,contentItems:_,flatItems:g,parser:h,options:I,rawOptions:v,hash:R}=a,S=m\|\|s,i=[],G={},{definition:X}=h\|\|{},{info:p}=X\|\|{},O=p?.["x-metadata"],w=!!r.openapi?.excludeFromSearch\|\|!!r.theme?.openapi?.excludeFromSearch\|\|!!u.openapi?.excludeFromSearch\|\|!!u.theme?.openapi?.excludeFromSearch,H={title:p?.title,description:p?.description,summary:p?.summary,...r.metadata,...O},P={untagged:[],tagged:new Map};for(const t of g){const{id:F,href:A,operationDefinition:T}=t;if(T){const{tags:b}=T;if(b)for(const B of b)P.tagged.has(B)\|\|P.tagged.set(B,[]),P.tagged.get(B)?.push(t);else P.untagged.push(t);V.isDevelopMode&&(G[`#${T.pointer}`]=t.href)}if(!ie({item:t}))continue;const M=t,Q=M.type==="section"&&!!M.infoDefinition,W=A.split("#")[0]+"/",z=t?.operationDefinition?.[D],K=oe(r.access?.rbac)?r.access.rbac:void 0;i.push({excludeFromSearch:w,slugSuffix:W,fsPath:S,metadata:{subType:"openapi-operation"},httpVerb:t?.httpVerb\|\|"",path:s,templateId:E,[D]:z\|\|K,getAiDocumentsStore:de({parser:h,options:I,info:p,tagOperations:P,openapiContentItem:M,metadata:H,relativePath:s,getSearchFacets:e.getSearchFacets,includeInLLMsTxt:Q,excludeFromSearch:w}),getStaticData:async b=>({props:{dynamicMarkdocComponents:["openapi"],baseSlug:b.baseSlug,seo:t["x-metadata"]?.seo\|\|{title:t.name,description:t.description},itemId:F,disableAutoScroll:!0}})})}if(i[0]={...i[0],metadata:{type:"openapi",...H},hasClientRoutes:!0,getSidebar:(t,F)=>{const A=[];return se({contentItems:_,sidebarItems:A,routeSlug:t.slug,navItem:F}),A},getNavText:()=>p?.title,getSearchDocuments:re(h,I,g,e.getSearchFacets,e.setSearchFacets,w)},O?.apiId&&!a.isVirtual){const t=ue(a.config.apis,a.realRelativePath);d[O.apiId]={[D]:t.rbac,[y]:{fsPath:S}}}const Y=i[0];i[0]=i[i.length-1],i[i.length-1]=Y;for(const t of i)e.addRoute({...t,serverPropsGetterIds:[f]});const J=V.isDevelopMode?s:void 0,$=`${L}${s}`;C[$]={fsPath:S,definition:o,options:v,sourcePath:J,routesMapping:G,hash:R};for(const t of i)e.addRoute({...t,sharedData:[{id:$,key:"openAPIDocsStore"}],serverPropsGetterIds:[f]})}})},afterRoutesCreated:async(e,n)=>{const l=new Set;for(const{chunks:a,relativePath:o,isVirtual:r,realRelativePath:s}of k){const m=ae(e.getAllRoutes(),o),_=(await n.cache.load(s,"load-oas")).compoundHash;await n.cache.load(o,{loader:async function(){for(const{node:h,markdown:I,key:v,relativePath:R}of a){const{ast:S}=await e.parseMarkdoc({input:{content:I,relativePath:R,isVirtual:r},context:n,deps:{sharedDataIds:[`${L}${R}`],routeSlugs:m}});h[`x-parsed-md-${v}`]={result:Z(S)}}},name:"openapi-markdoc-inline-parser"},[_]);for(const{pointer:g}of a)l.add(g)}const E=N.difference(l);for(const a of E)n.cache.delete(a);N=l;const f=e.getConfig(),u=f.access?.rbac??{},c=n.withPathPrefix("/mcp");for(const[a,o]of Object.entries(C)){const r=e.getRouteByFsPath(o.fsPath)?.baseSlug,s=r&&me(o.definition,a.slice(L.length),u,f.mcp)?{...o.definition,"x-mcp":{...ge(c),...o.definition["x-mcp"],servers:[{url:c}]}}:o.definition;await e.createSharedData(a,{...o,definition:s,baseSlug:r},o.hash)}Object.entries(d).forEach(([a,o])=>{const r=o[y]?.fsPath;if(!r)return;const s=e.getRouteByFsPath(r)?.baseSlug;d[a]={...o,[y]:{...o[y],slug:s},slug:s}}),e.setGlobalData({apiProducts:d})}}}export{Be as openAPIDocsPlugin};