@redocly/realm 0.136.0-next.13 → 0.136.0-next.15

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.js

@@ -0,0 +1,239 @@
+const t=`
+  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads
+  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name
+  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.
+  const normalizePath = (rawPath) => {
+    const path = rawPath.replace(/\\\\/g, '/');
+    const out = [];
+    for (const segment of path.split('/')) {
+      if (segment === '.') continue;
+      if (segment === '..') { if (out.length > 1) out.pop(); continue; }
+      out.push(segment);
+    }
+    let joined = out.join('/');
+    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';
+    return joined;
+  };
+
+  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };
+
+  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query
+  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a
+  // surrogate pair is encoded as the one character it stands for.
+  const encodeLiterals = (value) =>
+    value.replace(/[\\s"<>\\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {
+      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }
+    });
+
+  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox
+  // does not carry. The host re-parses the url before it fetches, so the request still goes to the
+  // punycoded name; only what guest code reads back differs.
+  const parseHostPort = (hostport, scheme) => {
+    let hostname = hostport;
+    let port = '';
+    if (hostport.startsWith('[')) {
+      const close = hostport.indexOf(']');
+      hostname = hostport.slice(0, close + 1);
+      const after = hostport.slice(close + 1);
+      if (after.startsWith(':')) port = after.slice(1);
+    } else {
+      const colon = hostport.lastIndexOf(':');
+      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }
+    }
+    if (port !== '' && !/^[0-9]+$/.test(port)) return null;
+    if (hostname === '') return null;
+    return {
+      hostname: hostname.toLowerCase(),
+      port: DEFAULT_PORTS[scheme] === port ? '' : port,
+      // A host written without a port leaves the port alone, rather than clearing it.
+      hasPort: port !== '',
+    };
+  };
+
+  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;
+
+  const parseAuthorityUrl = (scheme, rest) => {
+    const cut = rest.search(/[/\\\\?#]/);
+    const authority = cut === -1 ? rest : rest.slice(0, cut);
+    let tail = cut === -1 ? '' : rest.slice(cut);
+    let username = '';
+    let password = '';
+    let hostport = authority;
+    const at = authority.lastIndexOf('@');
+    if (at !== -1) {
+      const credentials = authority.slice(0, at);
+      hostport = authority.slice(at + 1);
+      const colon = credentials.indexOf(':');
+      username = colon === -1 ? credentials : credentials.slice(0, colon);
+      password = colon === -1 ? '' : credentials.slice(colon + 1);
+    }
+    const hostPort = parseHostPort(hostport, scheme);
+    if (!hostPort) return null;
+    let hash = '';
+    const hashAt = tail.indexOf('#');
+    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }
+    let search = '';
+    const queryAt = tail.indexOf('?');
+    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }
+    let pathname = tail === '' ? '/' : tail;
+    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;
+    return {
+      protocol: scheme,
+      username,
+      password,
+      hostname: hostPort.hostname,
+      port: hostPort.port,
+      pathname: encodeLiterals(normalizePath(pathname)),
+      search: encodeLiterals(search === '?' ? '' : search),
+      hash: encodeLiterals(hash === '#' ? '' : hash),
+    };
+  };
+
+  const parseUrl = (input, base) => {
+    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and
+    // a url copied out of a wrapped response body is the usual way one gets in here.
+    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');
+    const matched = ABSOLUTE_RE.exec(str);
+    // A scheme with no \`//\` (mailto:, data:) is not a fetch target, so it is not resolved.
+    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;
+    if (base === undefined) return null;
+    const resolved = parseUrl(base, undefined);
+    if (!resolved) return null;
+    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));
+    const parts = { ...resolved };
+    if (str.startsWith('#')) {
+      parts.hash = encodeLiterals(str === '#' ? '' : str);
+      return parts;
+    }
+    let rest = str;
+    let hash = '';
+    const hashAt = rest.indexOf('#');
+    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }
+    let search = '';
+    const queryAt = rest.indexOf('?');
+    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }
+    if (rest !== '') {
+      const absolute = /^[/\\\\]/.test(rest)
+        ? rest
+        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;
+      parts.pathname = encodeLiterals(normalizePath(absolute));
+    }
+    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).
+    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);
+    parts.hash = encodeLiterals(hash === '#' ? '' : hash);
+    return parts;
+  };
+
+  const URL = class URL {
+    constructor(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart
+    // and putting it back together does not re-encode what the server sent.
+    _applyParams() {
+      if (this._edited && this._params) {
+        const query = this._params.toString();
+        this._parts.search = query ? '?' + query : '';
+        this._edited = false;
+      }
+    }
+    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing
+    // setter would swallow \`url.host = \u2026\` and fetch the address the caller meant to replace.
+    get protocol() { return this._parts.protocol; }
+    set protocol(value) {
+      const next = String(value).toLowerCase().replace(/:$/, '') + ':';
+      // Only a scheme that carries an authority can replace one, the way the host parser reads it.
+      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;
+    }
+    get username() { return this._parts.username; }
+    set username(value) { this._parts.username = String(value); }
+    get password() { return this._parts.password; }
+    set password(value) { this._parts.password = String(value); }
+    get hostname() { return this._parts.hostname; }
+    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }
+    get port() { return this._parts.port; }
+    set port(value) {
+      const port = String(value);
+      if (port !== '' && !/^[0-9]+$/.test(port)) return;
+      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;
+    }
+    get host() {
+      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;
+    }
+    set host(value) {
+      const parsed = parseHostPort(String(value), this._parts.protocol);
+      if (!parsed) return;
+      this._parts.hostname = parsed.hostname;
+      if (parsed.hasPort) this._parts.port = parsed.port;
+    }
+    get origin() { return this._parts.protocol + '//' + this.host; }
+    get pathname() { return this._parts.pathname; }
+    set pathname(value) {
+      const path = String(value);
+      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);
+    }
+    get search() {
+      this._applyParams();
+      return this._parts.search;
+    }
+    set search(value) {
+      const query = String(value);
+      const body = query.startsWith('?') ? query.slice(1) : query;
+      this._parts.search = body ? encodeLiterals('?' + body) : '';
+      this._params = undefined;
+      this._edited = false;
+    }
+    get searchParams() {
+      if (!this._params) {
+        const params = new URLSearchParams(this._parts.search);
+        const url = this;
+        // Every method that can change the parameters has to mark the query for re-serialization.
+        for (const method of ['append', 'set', 'delete', 'sort']) {
+          const original = params[method];
+          params[method] = function (...args) {
+            url._edited = true;
+            return original.apply(params, args);
+          };
+        }
+        this._params = params;
+      }
+      return this._params;
+    }
+    get hash() { return this._parts.hash; }
+    set hash(value) {
+      const fragment = String(value);
+      this._parts.hash = fragment === ''
+        ? ''
+        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);
+    }
+    get href() {
+      this._applyParams();
+      const credentials = this._parts.username
+        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'
+        : '';
+      return this._parts.protocol + '//' + credentials + this.host +
+        this._parts.pathname + this._parts.search + this._parts.hash;
+    }
+    set href(value) {
+      const parsed = parseUrl(value, undefined);
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    toString() { return this.href; }
+    toJSON() { return this.href; }
+    static canParse(input, base) {
+      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;
+    }
+    static parse(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      return parsed ? new URL(input, base) : null;
+    }
+  };
+  globalThis.URL = URL;
+`;export{t as URL_POLYFILL};

package/dist/server/plugins/mcp/codemode/tools/describe-tools.js

@@ -1 +1 @@
-import{renderDescribeToolsOutput as w}from"../capabilities/index.js";import{sanitizeToolName as o}from"../build-tool-type-declarations.js";function g(i,l){const n=[...new Set([...i.map(s=>o(s.name)),...l.map(s=>o(s.id))])];return{type:"object",required:[],additionalProperties:!1,properties:{tools:{type:"array",description:`Tool names to describe: ${n.join(", ")}. Omit to describe everything.`,items:{type:"string"},nullable:!0}}}}function v(i,l,n,s){const r=new Map(i.map(t=>[o(t.name),t])),c=new Map(n.map(t=>[o(t.id),t]));return async t=>{const a=[...new Set((t.tools??[]).map(o))],p=a.length===0,m=a.filter(e=>!r.has(e)&&!c.has(e));if(m.length>0){const e=[...r.keys(),...c.keys()];throw new Error(`Unknown tool(s): ${m.join(", ")}. Valid tools: ${e.join(", ")}.`)}const u=p?n:n.filter(e=>a.includes(o(e.id))),d=p?i:a.filter(e=>r.has(e)).map(e=>r.get(e)),y=await Promise.all(d.map(e=>l(e.name))),f=d.filter((e,b)=>y[b]);return{content:[{type:"text",text:w(f,u,s)}]}}}export{v as describeTools,g as describeToolsSchema};
+import{renderDescribeToolsOutput as k}from"../capabilities/index.js";import{McpServerType as h}from"../../constants.js";import{reportMcpToolCalled as E,reportMcpToolError as S}from"../../workers/mcp-tool-telemetry.js";import{DESCRIBE_TOOLS_TOOL_NAME as w}from"../constants.js";import{sanitizeToolName as s}from"../build-tool-type-declarations.js";import{UnknownToolError as T}from"./tool-errors.js";function x(i,l){const r=[...new Set([...i.map(n=>s(n.name)),...l.map(n=>s(n.id))])];return{type:"object",required:[],additionalProperties:!1,properties:{tools:{type:"array",description:`Tool names to describe: ${r.join(", ")}. Omit to describe everything.`,items:r.length>0?{type:"string",enum:r}:{type:"string"},nullable:!0}}}}function L(i,l,r,n){const c=new Map(i.map(t=>[s(t.name),t])),p=new Map(r.map(t=>[s(t.id),t]));return async t=>{const m=performance.now(),d=n.mcpMode??"code";try{const o=[...new Set((t.tools??[]).map(s))],a=o.length===0,f=o.filter(e=>!c.has(e)&&!p.has(e));if(f.length>0){const e=[...c.keys(),...p.keys()];throw new T(`Unknown tool(s): ${f.join(", ")}. Valid tools: ${e.join(", ")}.`)}const g=a?r:r.filter(e=>o.includes(s(e.id))),u=a?i:o.filter(e=>c.has(e)).map(e=>c.get(e)),M=await Promise.all(u.map(e=>l(e.name))),b=u.filter((e,v)=>M[v]),y=k(b,g,n);return E({tool:w,mode:d,serverType:h.Docs,durationMs:Math.round(performance.now()-m),outputLength:y.length}),{content:[{type:"text",text:y}]}}catch(o){const a=o instanceof T;throw S({tool:w,mode:d,serverType:h.Docs,durationMs:Math.round(performance.now()-m),message:o instanceof Error?o.message:String(o),stack:!a&&o instanceof Error&&o.stack||"",errorClass:a?"tool_error":"server_error"}),o}}}export{L as describeTools,x as describeToolsSchema};

package/dist/server/plugins/mcp/codemode/tools/execute.js

@@ -1 +1 @@
-import{mcpToolHandlers as l}from"../../../../../client/mcp-tool-handlers-entry.js";import{runInSandbox as p}from"../../../../sandbox/sandbox.js";import{isMcpToolAvailable as h}from"../../workers/execute-mcp-tool.js";import{buildExecuteHostFetch as b,isFetchCapable as E}from"../../gateway-mcp/fetch-capability.js";import{withAuthRequiredMeta as T}from"../../gateway-mcp/upstream-auth.js";import{CODE_MODE_TOOL_NAMES as O,EXECUTE_TOOL_NAME as A}from"../constants.js";import{sanitizeToolName as C}from"../build-tool-type-declarations.js";import{invokeTool as w}from"../invoke-tool.js";import{createSandboxSetup as x}from"../sandbox/create-sandbox-setup.js";import{auditCode as M}from"../code-audit.js";import{reportCodeExecuted as v}from"../code-execution-telemetry.js";const y=async(t,e,r)=>{const o=await N(e,r),n=[],i=E(e)?b(e,s=>n.push(s)):void 0;let c=0;const u=i?s=>(c+=1,i(s)):void 0,d=M(t.code),m=Date.now(),{result:f,error:a}=await p(t.code,{setupContext:x(o,u)});return v({audit:d,fetchCount:c,outcome:a===void 0?"ok":"error",durationMs:Date.now()-m}),T({content:[{type:"text",text:JSON.stringify({result:f,error:a})}],isError:a!==void 0},n)};async function N(t,e){const r={};for(const o of Object.keys(l))O.has(o)||!await h({toolName:o,context:t}).catch(()=>!1)||(r[C(o)]=i=>w(o,i,t,e));return r}var B={[A]:y};export{B as default};
+import{mcpToolHandlers as l}from"../../../../../client/mcp-tool-handlers-entry.js";import{runInSandbox as p}from"../../../../sandbox/sandbox.js";import{isMcpToolAvailable as h}from"../../workers/execute-mcp-tool.js";import{buildExecuteHostFetch as b,isFetchCapable as E}from"../../gateway-mcp/fetch-capability.js";import{withAuthRequiredMeta as T}from"../../gateway-mcp/upstream-auth.js";import{CODE_MODE_TOOL_NAMES as C,EXECUTE_TOOL_NAME as O}from"../constants.js";import{sanitizeToolName as A}from"../build-tool-type-declarations.js";import{invokeTool as w}from"../invoke-tool.js";import{createSandboxSetup as x}from"../sandbox/create-sandbox-setup.js";import{auditCode as y}from"../code-audit.js";import{reportCodeExecuted as M}from"../code-execution-telemetry.js";import{logCodeExecutionAudit as N}from"../code-execution-audit.js";const v=async(e,t,r)=>{const o=await F(t,r),n=[],i=E(t)?b(t,c=>n.push(c)):void 0;let a=0;const u=i?c=>(a+=1,i(c)):void 0,d=y(e.code);N({audit:d,code:e.code,description:e.description,sessionHandle:e.sessionHandle,toolNames:Object.keys(o),fetchBudget:t.gatewayFetchBudgetPerExec,fetchCapable:i!==void 0});const m=Date.now(),{result:f,error:s}=await p(e.code,{setupContext:x(o,u)});return M({audit:d,fetchCount:a,outcome:s===void 0?"ok":"error",durationMs:Date.now()-m}),T({content:[{type:"text",text:JSON.stringify({result:f,error:s})}],isError:s!==void 0},n)};async function F(e,t){const r={};for(const o of Object.keys(l))C.has(o)||!await h({toolName:o,context:e}).catch(()=>!1)||(r[A(o)]=i=>w(o,i,e,t));return r}var J={[O]:v};export{J as default};

package/dist/server/plugins/mcp/codemode/tools/tool-errors.d.ts

@@ -0,0 +1,4 @@
+export declare class UnknownToolError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=tool-errors.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/tool-errors.js

@@ -0,0 +1 @@
+class n extends Error{constructor(r){super(r),this.name="UnknownToolError"}}export{n as UnknownToolError};

package/dist/server/plugins/mcp/docs-mcp/tools/openapi/get-endpoint-info.js

@@ -1 +1 @@
-import{resolveParameters as f,resolveRequestBody as y,resolveResponses as h}from"../../utils.js";import{isMcpEndpoint as x}from"./utils.js";import{loadApiDescription as E}from"./load-api-description.js";import{checkEndpointAndDeleteXMcp as v}from"../../../utils/xmcp-utils.js";const g=async(n,i)=>{const{path:o,method:s}=n;let t;try{t=await E(n,i)}catch(l){return{content:[{type:"text",text:l.message}],isError:!0}}const p=o.startsWith("/")?o:`/${o}`,{title:a=""}=t.info||{},r=t.paths?.[p],c=s.toLowerCase();if(!r)return{content:[{type:"text",text:"Endpoint not found"}],isError:!0};const e=r[c];if(!x(e)||!v(e,"docs"))return{content:[{type:"text",text:"Endpoint not found"}],isError:!0};const d=r?.parameters||[],m=e.parameters||[],u={...e,parameters:f({pathParams:d,opParams:m,definition:t}),requestBody:y(e.requestBody,t),responses:h(e.responses,t)};return{content:[{type:"text",text:JSON.stringify({api:a,version:t.info?.version||"",servers:t.servers||[],endpoint:{path:o,method:s.toUpperCase(),...u},globalSecurity:t.security||[],securitySchemes:t.components?.securitySchemes||{}},null,2)}]}};var B={"get-endpoint-info":g};export{B as default};
+import{resolveParameters as f,resolveRequestBody as l,resolveResponses as y}from"../../utils.js";import{isMcpEndpoint as x}from"./utils.js";import{loadApiDescription as E}from"./load-api-description.js";import{checkEndpointAndDeleteXMcp as v}from"../../../utils/xmcp-utils.js";const g=async(s,i)=>{const{path:o,method:r}=s;if(!o||!r)return{content:[{type:"text",text:'Both "path" and "method" are required (e.g. path: "/tickets", method: "GET").'}],isError:!0};let t;try{t=await E(s,i)}catch(h){return{content:[{type:"text",text:h.message}],isError:!0}}const p=o.startsWith("/")?o:`/${o}`,{title:a=""}=t.info||{},n=t.paths?.[p],c=r.toLowerCase();if(!n)return{content:[{type:"text",text:"Endpoint not found"}],isError:!0};const e=n[c];if(!x(e)||!v(e,"docs"))return{content:[{type:"text",text:"Endpoint not found"}],isError:!0};const d=n?.parameters||[],m=e.parameters||[],u={...e,parameters:f({pathParams:d,opParams:m,definition:t}),requestBody:l(e.requestBody,t),responses:y(e.responses,t)};return{content:[{type:"text",text:JSON.stringify({api:a,version:t.info?.version||"",servers:t.servers||[],endpoint:{path:o,method:r.toUpperCase(),...u},globalSecurity:t.security||[],securitySchemes:t.components?.securitySchemes||{}},null,2)}]}};var w={"get-endpoint-info":g};export{w as default};

package/dist/server/plugins/mcp/docs-mcp/utils.js

@@ -1 +1 @@
-function $(t,o,n){if(!o)return;const s=o.toLowerCase(),r=Object.values(t).filter(({name:i})=>i.toLowerCase()===s);if(r.length===0)return;const e=n?r.filter(i=>i.version===n):r;if(e.length===0)return;if(e.length===1)return e[0];if(new Set(e.map(({version:i})=>i||"")).size>1){const i=e.map(({version:a})=>a||"(no version)").join(", ");throw new Error(`Multiple versions of "${o}" found: ${i}. Specify a version to disambiguate.`)}const f=e.map(({relativePath:i})=>`"${i||"(unknown path)"}"`).join(", "),u=e[0].version?` at version "${e[0].version}"`:"";throw new Error(`Multiple APIs are titled "${o}"${u}. Pass the "filePath" parameter to select one of: ${f}.`)}function v(t,o){return Object.values(t).filter(({name:n})=>n.toLowerCase().includes(o.toLowerCase()))}function d(t,o){if(!o||!t?.startsWith("#/"))return;const n=t.slice(2).split("/");let s=o;for(const r of n)if(typeof s=="object"&&s!==null&&r in s)s=s[r];else return;return s}function l({schema:t,definition:o,visitedRefs:n=new Set,maxDepth:s=50,currentDepth:r=0}){if(!t)return;if(r>=s)return{type:"object",description:`Maximum resolution depth exceeded (${s})`};if("$ref"in t&&t.$ref){if(n.has(t.$ref))return{type:"object",description:`Circular reference detected: ${t.$ref}`,"x-circular-ref":t.$ref};const f=new Set(n);f.add(t.$ref);const u=d(t.$ref,o);return u?l({schema:u,definition:o,visitedRefs:f,maxDepth:s,currentDepth:r+1}):{type:"object",description:`Could not resolve reference: ${t.$ref}`,"x-unresolved-ref":t.$ref}}const e={...t};if(e.properties){const f={};for(const[u,i]of Object.entries(e.properties)){const a=l({schema:i,definition:o,visitedRefs:new Set(n),maxDepth:s,currentDepth:r+1});f[u]=a||i}e.properties=f}if(e.items&&typeof e.items=="object")if(Array.isArray(e.items))e.items=e.items.map(f=>l({schema:f,definition:o,visitedRefs:new Set(n),maxDepth:s,currentDepth:r+1})||f);else{const f=l({schema:e.items,definition:o,visitedRefs:new Set(n),maxDepth:s,currentDepth:r+1});f&&(e.items=f)}return["allOf","anyOf","oneOf"].forEach(f=>{const u=e[f];Array.isArray(u)&&(e[f]=u.reduce((i,a)=>{const p=l({schema:a,definition:o,visitedRefs:new Set(n),maxDepth:s,currentDepth:r+1});return p&&i.push(p),i},[]))}),e}function h({pathParams:t,opParams:o,definition:n}){return[...t,...o].reduce((s,r)=>{if(!r)return s;if("$ref"in r&&r.$ref){const e=d(r.$ref,n);return e&&s.push({...e,schema:"schema"in e&&e.schema?l({schema:e.schema,definition:n}):void 0}),s}return s.push({...r,schema:"schema"in r&&r.schema?l({schema:r.schema,definition:n}):void 0}),s},[])}function m(t,o){const n={...t};if(t.example!==void 0&&(n.example=t.example),!t.examples)return n;const s={};for(const[r,e]of Object.entries(t.examples))if("$ref"in e){const c=d(e.$ref,o);c&&(s[r]=c)}else s[r]=e;return n.examples=s,n}function w(t,o){if(!t)return;const n="$ref"in t&&t.$ref?d(t.$ref,o):t;if(!n)return;const s={...n};if("content"in n&&n.content){const r={};for(const[e,c]of Object.entries(n.content))r[e]={...m(c,o),schema:c.schema?l({schema:c.schema,definition:o}):void 0};s.content=r}return s}function x(t,o){return Object.entries(t).reduce((n,[s,r])=>{const e="$ref"in r&&r.$ref?d(r.$ref,o):r;if(!e)return n;const c={...e};if("content"in e&&e.content){const f={};for(const[u,i]of Object.entries(e.content))f[u]={...m(i,o),schema:i.schema?l({schema:i.schema,definition:o}):void 0};c.content=f}return n[s]=c,n},{})}export{v as filterApiDescriptionsByName,$ as findApiDescriptionByNameAndVersion,h as resolveParameters,d as resolveRef,w as resolveRequestBody,x as resolveResponses,l as resolveSchemaRefs};
+function v(e,o,s){if(!o)return;const r=o.toLowerCase(),t=Object.values(e).filter(({name:f})=>f.toLowerCase()===r);if(t.length===0)return;const n=s?t.filter(f=>f.version===s):t;if(n.length===0)return;if(n.length===1)return n[0];if(new Set(n.map(({version:f})=>f||"")).size>1){const f=n.map(({version:l})=>l||"(no version)").join(", ");throw new Error(`Multiple versions of "${o}" found: ${f}. Specify a version to disambiguate.`)}const i=n.map(({relativePath:f})=>`"${f||"(unknown path)"}"`).join(", "),u=n[0].version?` at version "${n[0].version}"`:"";throw new Error(`Multiple APIs are titled "${o}"${u}. Pass the "filePath" parameter to select one of: ${i}.`)}function h(e,o){return Object.values(e).filter(({name:s})=>s.toLowerCase().includes(o.toLowerCase()))}function d(e,o){if(!o||!e?.startsWith("#/"))return;const s=e.slice(2).split("/");let r=o;for(const t of s)if(typeof r=="object"&&r!==null&&t in r)r=r[t];else return;return r}function p(e,o){const s=Object.fromEntries(Object.entries(e).filter(([r,t])=>r!=="$ref"&&t!==void 0));return{...o,...s}}function a({schema:e,definition:o,visitedRefs:s=new Set,maxDepth:r=50,currentDepth:t=0}){if(!e)return;if(t>=r)return{type:"object",description:`Maximum resolution depth exceeded (${r})`};if("$ref"in e&&e.$ref){if(s.has(e.$ref))return{type:"object",description:`Circular reference detected: ${e.$ref}`,"x-circular-ref":e.$ref};const i=new Set(s);i.add(e.$ref);const u=d(e.$ref,o);if(!u)return{type:"object",description:`Could not resolve reference: ${e.$ref}`,"x-unresolved-ref":e.$ref};const f=a({schema:u,definition:o,visitedRefs:i,maxDepth:r,currentDepth:t+1});return f&&p(e,f)}const n={...e};if(n.properties){const i={};for(const[u,f]of Object.entries(n.properties)){const l=a({schema:f,definition:o,visitedRefs:new Set(s),maxDepth:r,currentDepth:t+1});i[u]=l||f}n.properties=i}if(n.items&&typeof n.items=="object")if(Array.isArray(n.items))n.items=n.items.map(i=>a({schema:i,definition:o,visitedRefs:new Set(s),maxDepth:r,currentDepth:t+1})||i);else{const i=a({schema:n.items,definition:o,visitedRefs:new Set(s),maxDepth:r,currentDepth:t+1});i&&(n.items=i)}return["allOf","anyOf","oneOf"].forEach(i=>{const u=n[i];Array.isArray(u)&&(n[i]=u.reduce((f,l)=>{const m=a({schema:l,definition:o,visitedRefs:new Set(s),maxDepth:r,currentDepth:t+1});return m&&f.push(m),f},[]))}),n}function w({pathParams:e,opParams:o,definition:s}){return[...e,...o].reduce((r,t)=>{if(!t)return r;if("$ref"in t&&t.$ref){const n=d(t.$ref,s);if(!n)return r;const c=p(t,n);return r.push({...c,schema:"schema"in c&&c.schema?a({schema:c.schema,definition:s}):void 0}),r}return r.push({...t,schema:"schema"in t&&t.schema?a({schema:t.schema,definition:s}):void 0}),r},[])}function $(e,o){const s={...e};if(e.example!==void 0&&(s.example=e.example),!e.examples)return s;const r={};for(const[t,n]of Object.entries(e.examples))if("$ref"in n){const c=d(n.$ref,o);c&&(r[t]=c)}else r[t]=n;return s.examples=r,s}function b(e,o){if(!e)return;const s="$ref"in e&&e.$ref?d(e.$ref,o):e;if(!s)return;const r=p(e,s),t={...r};if("content"in r&&r.content){const n={};for(const[c,i]of Object.entries(r.content))n[c]={...$(i,o),schema:i.schema?a({schema:i.schema,definition:o}):void 0};t.content=n}return t}function j(e,o){return Object.entries(e).reduce((s,[r,t])=>{const n="$ref"in t&&t.$ref?d(t.$ref,o):t;if(!n)return s;const c=p(t,n),i={...c};if("content"in c&&c.content){const u={};for(const[f,l]of Object.entries(c.content))u[f]={...$(l,o),schema:l.schema?a({schema:l.schema,definition:o}):void 0};i.content=u}return s[r]=i,s},{})}export{h as filterApiDescriptionsByName,v as findApiDescriptionByNameAndVersion,w as resolveParameters,d as resolveRef,b as resolveRequestBody,j as resolveResponses,a as resolveSchemaRefs};

package/dist/server/plugins/mcp/gateway-mcp/elicitation.js

@@ -1,3 +1,3 @@
-import{inputRequired as s,inputResponse as p}from"@modelcontextprotocol/server";import{MANAGE_API_CREDENTIALS_TOOL_NAME as m}from"../constants.js";import{secretStore as T,ELICITATION_TTL_MS as f}from"./secret-store.js";import{ANONYMOUS_SUBJECT_PREFIX as l}from"./subject.js";const c="credentials";function C(e){const t=p(e,c);return t.kind==="elicit"&&(t.action==="decline"||t.action==="cancel")}function _(e){return{api:e.api,name:e.name}}async function y(e){const{url:t}=await d(e);return s({inputRequests:{[c]:s.elicitUrl({message:A(e.target.name,e.hasExistingSecret),url:t})}})}async function b(e){const{url:t}=await d(e);return I(e,t,$(e.subject))}function O(e){return[e.status===401?`The stored credentials for "${e.name}" were rejected (HTTP 401).`:`The "${e.name}" API rejected the request with HTTP ${e.status}.`,"",`Do not retry the same call. Call \`${m}\` with api: "${e.api}" to get a link where the user can replace or remove the stored credentials, then retry once they confirm.`].join(`
-`)}async function d({kv:e,subject:t,baseUrl:n,target:i,auth:a,hasExistingSecret:o}){const r=await T.createElicitation(e,{subject:t,api:i.api,name:i.name,auth:a,hasExistingSecret:o});return{token:r,url:E(n,r)}}function $(e){return e.startsWith(l)?e.slice(l.length):void 0}function A(e,t){return t?`Open the link to replace or remove the stored credentials for the "${e}" API. They never pass through the chat.`:`The "${e}" API needs credentials. Open the link to add them. They never pass through the chat.`}function E(e,t){if(!e)return`/mcp/credentials?token=${t}`;try{const n=new URL("/mcp/credentials",e);return n.searchParams.set("token",t),n.toString()}catch{return`${e}/mcp/credentials?token=${t}`}}function I({target:e,reason:t,hasExistingSecret:n},i,a){const o=[t.kind==="authFailure"?`The upstream API "${e.name}" returned ${t.status} and needs credentials.`:n?`Credentials are already stored for the "${e.name}" API; the link below lets the user replace or remove them.`:`The "${e.name}" API needs credentials.`,"",`**Action required: show the user the link below and ask them to open it in a browser (valid ${Math.round(f/6e4)} minutes):**`,"",i,"",a?`Then call this tool again with sessionHandle: "${a}" - the credentials are stored against that handle, applied server-side, and never appear in the conversation.`:"Then call this tool again - the credentials are applied server-side and never appear in the conversation."],r=t.kind==="authFailure"?t.otherApiNames??[]:[];if(r.length>0){const h=r.map(u=>`"${u}"`).join(", ");o.push("",`The remaining APIs (${h}) will prompt for credentials on subsequent calls.`)}return o.join(`
-`)}export{c as CREDENTIALS_INPUT_REQUEST_KEY,O as buildCredentialsToolHint,b as buildUpstreamCredentialFallback,y as buildUpstreamCredentialInputRequired,C as isCredentialElicitationDeclined,_ as targetOf};
+import{inputRequired as c,inputResponse as f}from"@modelcontextprotocol/server";import{MANAGE_API_CREDENTIALS_TOOL_NAME as T}from"../constants.js";import{secretStore as $,ELICITATION_TTL_MS as A}from"./secret-store.js";import{ANONYMOUS_SUBJECT_PREFIX as l}from"./subject.js";const h="credentials";function C(e){const t=f(e,h);return t.kind==="elicit"&&(t.action==="decline"||t.action==="cancel")}function _(e){return{api:e.api,name:e.name}}async function b(e){const{url:t}=await d(e);return c({inputRequests:{[h]:c.elicitUrl({message:P(e.target.name,e.hasExistingSecret),url:t})}})}async function O(e){const{url:t}=await d(e);return y(e,t,I(e.subject))}function R(e){return[e.status===401?`The stored credentials for "${e.name}" were rejected (HTTP 401).`:`The "${e.name}" API rejected the request with HTTP ${e.status}.`,"",`Do not retry the same call. Call \`${T}\` with api: "${e.api}" to get a link the user has to open in a browser to replace or remove the stored credentials, then retry once they confirm they saved them.`].join(`
+`)}async function d({kv:e,subject:t,baseUrl:n,target:i,auth:a,hasExistingSecret:o}){const r=await $.createElicitation(e,{subject:t,api:i.api,name:i.name,auth:a,hasExistingSecret:o});return{token:r,url:g(n,r)}}function I(e){return e.startsWith(l)?e.slice(l.length):void 0}function P(e,t){const n=`The link works for ${u()} minutes.`;return t?`Open this page in a browser to replace or remove the stored credentials for the "${e}" API. They go straight to the API and never enter the chat. ${n}`:`The "${e}" API needs credentials. Open this page in a browser to paste them - they go straight to the API and never enter the chat. ${n}`}function u(){return Math.round(A/6e4)}function g(e,t){if(!e)return`/mcp/credentials?token=${t}`;try{const n=new URL("/mcp/credentials",e);return n.searchParams.set("token",t),n.toString()}catch{return`${e}/mcp/credentials?token=${t}`}}function y({target:e,reason:t,hasExistingSecret:n},i,a){const r=[`**Stop and show the user this link. They have to open it in a browser to ${n?`replace or remove the stored credentials for the "${e.name}" API`:`add credentials for the "${e.name}" API`} - nothing continues until they do.**`,"",i,"",`The link is valid ${u()} minutes and opens a form on this site. Credentials go straight to the API from there: never ask for them in the conversation and never pass them as a tool argument.`,"",t.kind==="authFailure"?`The upstream API "${e.name}" returned ${t.status} and needs credentials.`:n?`Credentials are already stored for the "${e.name}" API; the link lets the user replace or remove them.`:`The "${e.name}" API needs credentials.`,a?`Once the user confirms they saved them, call this tool again with sessionHandle: "${a}" - the credentials are stored against that handle, applied server-side, and never appear in the conversation.`:"Once the user confirms they saved them, call this tool again - the credentials are applied server-side and never appear in the conversation."],s=t.kind==="authFailure"?t.otherApiNames??[]:[];if(s.length>0){const p=s.map(m=>`"${m}"`).join(", ");r.push("",`The remaining APIs (${p}) will prompt for credentials on subsequent calls.`)}return r.join(`
+`)}export{h as CREDENTIALS_INPUT_REQUEST_KEY,R as buildCredentialsToolHint,O as buildUpstreamCredentialFallback,b as buildUpstreamCredentialInputRequired,C as isCredentialElicitationDeclined,_ as targetOf};

package/dist/server/plugins/mcp/gateway-mcp/fetch/fetch-audit.d.ts

@@ -0,0 +1,24 @@
+import type { GatewayFetchOutcome } from './fetch-telemetry.js';
+type GatewayFetchAuditRecord = {
+    rawUrl: string;
+    method: string;
+    host: string;
+    outcome: GatewayFetchOutcome;
+    durationMs: number;
+    injectedSecretValues: readonly string[];
+    path?: string;
+    api?: string;
+    status?: number;
+    requestHeaders?: Record<string, string>;
+    requestBody?: string;
+    responseHeaders?: Record<string, string>;
+    responseBody?: string;
+};
+/**
+ * One outbound gateway fetch. `host`, `method` and `path` repeat the `mcpServer.gatewayFetch`
+ * telemetry event verbatim so a Grafana row joins onto this line; `url_sha256` identifies the
+ * request itself, since the telemetry event's `path` is deliberately normalized.
+ */
+export declare function logGatewayFetchAudit({ rawUrl, method, host, outcome, durationMs, injectedSecretValues, path, api, status, requestHeaders, requestBody, responseHeaders, responseBody, }: GatewayFetchAuditRecord): void;
+export {};
+//# sourceMappingURL=fetch-audit.d.ts.map

package/dist/server/plugins/mcp/gateway-mcp/fetch/fetch-audit.js

@@ -0,0 +1 @@
+import{auditHeaderNames as u,auditInput as g,auditOutputDigest as c,auditSha256 as b,auditUrl as l,logAuditRecord as y}from"../../audit/audit-log.js";function D({rawUrl:e,method:n,host:i,outcome:r,durationMs:o,injectedSecretValues:t,path:_,api:h,status:f,requestHeaders:p,requestBody:d,responseHeaders:m,responseBody:a}){const s=a===void 0?void 0:c(a);y("Record gateway fetch",{url_sha256:b(e),host:i,method:n,path:_,api:h,outcome:r,status:f,duration_ms:o,url:l(e,t),request_header_names:u(p),request_body:d===void 0?void 0:g(d,t),response_header_names:u(m),response_sha256:s?.sha256,response_bytes:s?.bytes})}export{D as logGatewayFetchAudit};

package/dist/server/plugins/mcp/gateway-mcp/fetch/fetch-bridge.js

@@ -1 +1 @@
-import{Agent as P}from"undici";import{envConfig as W}from"../../../../config/env-config.js";import{logger as R}from"../../../../tools/notifiers/logger.js";import{assertUrlAllowed as H}from"./ssrf-guard.js";import{createSsrfSafeLookup as I}from"./ssrf-safe-lookup.js";import{SsrfBlockedError as C}from"./ssrf-blocklist.js";import{GatewayFetchBlockedError as $,GatewayFetchSystemError as J,GatewayFetchUserError as L}from"./fetch-errors.js";import{redactHeaders as x,redactSecretsFromString as K}from"./redact.js";import{normalizeFetchPath as V}from"./normalize-path.js";import{reportGatewayFetch as O}from"./fetch-telemetry.js";const G="x-forwarded-for",X=3e4,Y=1024*1024,z=new Set([401,403,407]);let T;function Q(){if(!T){const t=W.isDevelopMode;t&&R.warn("Gateway MCP SSRF guard: loopback upstreams are ALLOWED (develop mode only, never in runtime)."),T=new P({connect:{lookup:I({allowLoopback:t})}})}return T}function ge({allowedHosts:t,apis:e=[],authorization:r,onAuthRequired:n,fetchImpl:c=fetch,dispatcher:u=Q(),timeoutMs:i=X,maxResponseBytes:h=Y,maxFetchesPerExec:f,clientIp:m}){const F=[...t,...e.flatMap(o=>o.matchers)],N=[r,...e.map(o=>o.secret?.value)].filter(o=>!!o),k=e.map(o=>o.secret?.header).filter(o=>!!o);let v=0;return async o=>{const g=o.method??"GET",D=Date.now();let U,S,b,E={},_,A;try{if(f!==void 0){const l=Math.max(0,f);if(v+=1,v>l)throw new L(`Outbound fetch budget exceeded (max ${l} fetches per execute); split the work across calls`)}const d=H(o.url,F);U=d.hostname,S=V(d.pathname);const y=e.filter(l=>l.matchers.some(j=>j.test(d.hostname))),a=y.length===1?y[0]:void 0;b=a?.slug,E=ae(o.headers,a?.secret,r,m);const w=new AbortController;A=setTimeout(()=>w.abort(),i);const s=await c(d,{method:g,headers:E,body:o.body,redirect:"manual",signal:w.signal,dispatcher:u});_=s.status,z.has(s.status)&&a&&n&&n({api:a.slug,name:a.name,status:s.status});const M=await ne(s,h);let p=se(s.headers);if(te(s.status)){p=x(p,k);const{location:l}=p;l&&!re(l,d,F)&&delete p.location}return O({host:d.hostname,method:g,outcome:"success",durationMs:Date.now()-D,path:S,api:b,status:s.status,bytes:Buffer.byteLength(M,"utf8")}),{status:s.status,statusText:s.statusText,ok:s.ok,headers:p,bodyText:M}}catch(d){const{outcome:y,userSafe:a}=q(d),w=U??(a instanceof $?a.host:void 0)??ee(o.url)??"invalid-url";throw O({host:w,method:g,outcome:y,durationMs:Date.now()-D,path:S,api:b,status:_}),a||(R.error(`Gateway MCP fetch failed [${g} ${w}]: ${K(oe(d),N)} headers=${JSON.stringify(x(E,k))}`),new J("Upstream fetch failed due to an internal error"))}finally{A!==void 0&&clearTimeout(A)}}}function Z(t){let e=t;for(let r=0;r<5&&e instanceof Error;r++){if(e instanceof L||e instanceof C)return e;e=e.cause}}function q(t){const e=Z(t);return{outcome:e instanceof $||e instanceof C?"blocked":e?"user_error":"system_error",userSafe:e}}function ee(t){try{return new URL(t).hostname||void 0}catch{return}}function te(t){return t>=300&&t<400}function re(t,e,r){try{return!!H(new URL(t,e).href,r)}catch{return!1}}function oe(t){if(!(t instanceof Error))return String(t);const e=t.cause;return e instanceof Error?`${t.message}: ${e.message}`:t.message}async function ne(t,e){const r=Number(t.headers.get("content-length"));if(Number.isFinite(r)&&r>e)throw B(e,r);if(!t.body)return"";const n=t.body.getReader(),c=new TextDecoder;let u=0,i="";try{for(;;){const{done:h,value:f}=await n.read();if(h)break;if(u+=f.byteLength,u>e)throw B(e,u);i+=c.decode(f,{stream:!0})}return i+c.decode()}finally{await n.cancel().catch(()=>{})}}function B(t,e){return new L(`Response is too large (over ${t} bytes, got ${e}); request less data`)}function ae(t,e,r,n){const c={},u=new Set;for(const[h,f]of Object.entries(t??{})){const m=h.toLowerCase();m==="host"||m==="content-length"||m!==G&&(u.add(m),c[h]=f)}n&&(c[G]=n);const i=e??(r?{header:"Authorization",value:r}:void 0);return i&&!u.has(i.header.toLowerCase())&&(c[i.header]=i.value),c}function se(t){const e={};return t.forEach((r,n)=>{e[n.toLowerCase()]=r}),e}export{ge as buildFetchBridge,Q as getDefaultAgent,ne as readCappedBody};
+import{Agent as W}from"undici";import{envConfig as I}from"../../../../config/env-config.js";import{logger as R}from"../../../../tools/notifiers/logger.js";import{assertUrlAllowed as B}from"./ssrf-guard.js";import{createSsrfSafeLookup as J}from"./ssrf-safe-lookup.js";import{SsrfBlockedError as C}from"./ssrf-blocklist.js";import{GatewayFetchBlockedError as $,GatewayFetchSystemError as K,GatewayFetchUserError as U}from"./fetch-errors.js";import{redactHeaders as x,redactSecretsFromString as V}from"./redact.js";import{normalizeFetchPath as X}from"./normalize-path.js";import{reportGatewayFetch as G}from"./fetch-telemetry.js";import{logGatewayFetchAudit as O}from"./fetch-audit.js";const N="x-forwarded-for",Y=3e4,z=1024*1024,Q=new Set([401,403,407]);let M;function Z(){if(!M){const t=I.isDevelopMode;t&&R.warn("Gateway MCP SSRF guard: loopback upstreams are ALLOWED (develop mode only, never in runtime)."),M=new W({connect:{lookup:J({allowLoopback:t})}})}return M}function be({allowedHosts:t,apis:e=[],authorization:o,onAuthRequired:s,fetchImpl:i=fetch,dispatcher:u=Z(),timeoutMs:d=Y,maxResponseBytes:h=z,maxFetchesPerExec:f,clientIp:m}){const k=[...t,...e.flatMap(r=>r.matchers)],L=[o,...e.map(r=>r.secret?.value)].filter(r=>!!r),v=e.map(r=>r.secret?.header).filter(r=>!!r);let H=0;return async r=>{const w=r.method??"GET",A=Date.now();let _,g,b,S={},T,D;try{if(f!==void 0){const l=Math.max(0,f);if(H+=1,H>l)throw new U(`Outbound fetch budget exceeded (max ${l} fetches per execute); split the work across calls`)}const n=B(r.url,k);_=n.hostname,g=X(n.pathname);const E=e.filter(l=>l.matchers.some(P=>P.test(n.hostname))),c=E.length===1?E[0]:void 0;b=c?.slug,S=se(r.headers,c?.secret,o,m);const p=new AbortController;D=setTimeout(()=>p.abort(),d);const a=await i(n,{method:w,headers:S,body:r.body,redirect:"manual",signal:p.signal,dispatcher:u});T=a.status,Q.has(a.status)&&c&&s&&s({api:c.slug,name:c.name,status:a.status});const F=await ae(a,h);let y=ce(a.headers);if(re(a.status)){y=x(y,v);const{location:l}=y;l&&!oe(l,n,k)&&delete y.location}return G({host:n.hostname,method:w,outcome:"success",durationMs:Date.now()-A,path:g,api:b,status:a.status,bytes:Buffer.byteLength(F,"utf8")}),O({rawUrl:n.href,method:w,host:n.hostname,outcome:"success",durationMs:Date.now()-A,injectedSecretValues:L,path:g,api:b,status:a.status,requestHeaders:S,requestBody:r.body,responseHeaders:y,responseBody:F}),{status:a.status,statusText:a.statusText,ok:a.ok,headers:y,bodyText:F}}catch(n){const{outcome:E,userSafe:c}=ee(n),p=_??(c instanceof $?c.host:void 0)??te(r.url)??"invalid-url";throw G({host:p,method:w,outcome:E,durationMs:Date.now()-A,path:g,api:b,status:T}),O({rawUrl:r.url,method:w,host:p,outcome:E,durationMs:Date.now()-A,injectedSecretValues:L,path:g,api:b,status:T,requestHeaders:S,requestBody:r.body}),c||(R.error(`Gateway MCP fetch failed [${w} ${p}]: ${V(ne(n),L)} headers=${JSON.stringify(x(S,v))}`),new K("Upstream fetch failed due to an internal error"))}finally{D!==void 0&&clearTimeout(D)}}}function q(t){let e=t;for(let o=0;o<5&&e instanceof Error;o++){if(e instanceof U||e instanceof C)return e;e=e.cause}}function ee(t){const e=q(t);return{outcome:e instanceof $||e instanceof C?"blocked":e?"user_error":"system_error",userSafe:e}}function te(t){try{return new URL(t).hostname||void 0}catch{return}}function re(t){return t>=300&&t<400}function oe(t,e,o){try{return!!B(new URL(t,e).href,o)}catch{return!1}}function ne(t){if(!(t instanceof Error))return String(t);const e=t.cause;return e instanceof Error?`${t.message}: ${e.message}`:t.message}async function ae(t,e){const o=Number(t.headers.get("content-length"));if(Number.isFinite(o)&&o>e)throw j(e,o);if(!t.body)return"";const s=t.body.getReader(),i=new TextDecoder;let u=0,d="";try{for(;;){const{done:h,value:f}=await s.read();if(h)break;if(u+=f.byteLength,u>e)throw j(e,u);d+=i.decode(f,{stream:!0})}return d+i.decode()}finally{await s.cancel().catch(()=>{})}}function j(t,e){return new U(`Response is too large (over ${t} bytes, got ${e}); request less data`)}function se(t,e,o,s){const i={},u=new Set;for(const[h,f]of Object.entries(t??{})){const m=h.toLowerCase();m==="host"||m==="content-length"||m!==N&&(u.add(m),i[h]=f)}s&&(i[N]=s);const d=e??(o?{header:"Authorization",value:o}:void 0);return d&&!u.has(d.header.toLowerCase())&&(i[d.header]=d.value),i}function ce(t){const e={};return t.forEach((o,s)=>{e[s.toLowerCase()]=o}),e}export{be as buildFetchBridge,Z as getDefaultAgent,ae as readCappedBody};

package/dist/server/plugins/mcp/handlers/mcp-credentials-handler.js

@@ -1,4 +1,4 @@
-import{secretStore as s}from"../gateway-mcp/secret-store.js";import{buildAllowedHostMatchers as C}from"../gateway-mcp/fetch/allowed-hosts.js";import{assertUrlAllowed as P}from"../gateway-mcp/fetch/ssrf-guard.js";import{readCappedBody as I,getDefaultAgent as E}from"../gateway-mcp/fetch/fetch-bridge.js";const p={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'"},_=3e4,T=64*1024;let k=fetch;function Y(e){k=e}const R=async(e,t)=>{const n=await t.getKv();if(e.method==="GET"){const o=new URL(e.url).searchParams.get("token")??"",r=await s.peekElicitation(n,o);return r?new Response(q(r,o),{status:200,headers:p}):u()}if(e.method==="POST"){const o=await e.formData(),r=String(o.get("token")??""),m=String(o.get("mode")??"token");return m==="client-credentials"?O(n,o,r):m==="clear"?F(n,r):z(n,o,r)}return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, POST"}})};async function z(e,t,n){const o=String(t.get("secret")??"");if(!o)return u();const r=await s.consumeElicitation(e,n);return r?(await s.setSecret(e,r.subject,r.api,B(r.auth,o)),new Response(x(r.name),{status:200,headers:p})):u()}async function F(e,t){const n=await s.consumeElicitation(e,t);return n?(await s.deleteSecret(e,n.subject,n.api),new Response(D(n.name),{status:200,headers:p})):u()}async function O(e,t,n){const o=String(t.get("client_id")??"").trim(),r=String(t.get("client_secret")??"").trim();if(!o||!r)return u();const m=await s.peekElicitation(e,n);if(!m||m.auth.kind!=="oauth2ClientCredentials")return u();const i=await s.consumeElicitation(e,n);if(!i||i.auth.kind!=="oauth2ClientCredentials")return u();const b=i.auth;try{const A=C([{url:b.tokenUrl}]),$=P(b.tokenUrl,A),v=new AbortController,S=setTimeout(()=>v.abort(),_);let y;try{y=await k($,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials",client_id:o,client_secret:r,...b.scopes.length>0?{scope:b.scopes.join(" ")}:{}}),redirect:"manual",signal:v.signal,dispatcher:E()})}finally{clearTimeout(S)}if(!y.ok)return f(i.name);let w;try{w=await I(y,T)}catch{return f(i.name)}let h;try{h=JSON.parse(w)}catch{return f(i.name)}const g=typeof h=="object"&&h!==null&&"access_token"in h?h.access_token:void 0;return typeof g!="string"||!g?f(i.name):(await s.setSecret(e,i.subject,i.api,{header:"Authorization",value:`Bearer ${g}`}),new Response(x(i.name),{status:200,headers:p}))}catch{return f(i.name)}}function B(e,t){return e.kind==="apiKey"?{header:e.header,value:t}:e.kind==="bearer"||e.kind==="oauth2ClientCredentials"?{header:"Authorization",value:j(t)}:{header:"Authorization",value:t}}function j(e){const t=e.trim();return t.toLowerCase().startsWith("bearer")?t:`Bearer ${t}`}function a(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function c(e){return`<!doctype html>
+import{secretStore as s,ELICITATION_TTL_MS as x}from"../gateway-mcp/secret-store.js";import{buildAllowedHostMatchers as P}from"../gateway-mcp/fetch/allowed-hosts.js";import{assertUrlAllowed as _}from"../gateway-mcp/fetch/ssrf-guard.js";import{readCappedBody as E,getDefaultAgent as T}from"../gateway-mcp/fetch/fetch-bridge.js";const p={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'"},R=3e4,z=64*1024;let $=fetch;function Q(e){$=e}const F=async(e,t)=>{const n=await t.getKv();if(e.method==="GET"){const o=new URL(e.url).searchParams.get("token")??"",r=await s.peekElicitation(n,o);return r?new Response(j(r,o),{status:200,headers:p}):u()}if(e.method==="POST"){const o=await e.formData(),r=String(o.get("token")??""),m=String(o.get("mode")??"token");return m==="client-credentials"?M(n,o,r):m==="clear"?B(n,r):O(n,o,r)}return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, POST"}})};async function O(e,t,n){const o=String(t.get("secret")??"");if(!o)return u();const r=await s.consumeElicitation(e,n);return r?(await s.setSecret(e,r.subject,r.api,H(r.auth,o)),new Response(A(r.name),{status:200,headers:p})):u()}async function B(e,t){const n=await s.consumeElicitation(e,t);return n?(await s.deleteSecret(e,n.subject,n.api),new Response(D(n.name),{status:200,headers:p})):u()}async function M(e,t,n){const o=String(t.get("client_id")??"").trim(),r=String(t.get("client_secret")??"").trim();if(!o||!r)return u();const m=await s.peekElicitation(e,n);if(!m||m.auth.kind!=="oauth2ClientCredentials")return u();const i=await s.consumeElicitation(e,n);if(!i||i.auth.kind!=="oauth2ClientCredentials")return u();const b=i.auth;try{const S=P([{url:b.tokenUrl}]),C=_(b.tokenUrl,S),k=new AbortController,I=setTimeout(()=>k.abort(),R);let g;try{g=await $(C,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials",client_id:o,client_secret:r,...b.scopes.length>0?{scope:b.scopes.join(" ")}:{}}),redirect:"manual",signal:k.signal,dispatcher:T()})}finally{clearTimeout(I)}if(!g.ok)return f(i.name);let v;try{v=await E(g,z)}catch{return f(i.name)}let h;try{h=JSON.parse(v)}catch{return f(i.name)}const w=typeof h=="object"&&h!==null&&"access_token"in h?h.access_token:void 0;return typeof w!="string"||!w?f(i.name):(await s.setSecret(e,i.subject,i.api,{header:"Authorization",value:`Bearer ${w}`}),new Response(A(i.name),{status:200,headers:p}))}catch{return f(i.name)}}function H(e,t){return e.kind==="apiKey"?{header:e.header,value:t}:e.kind==="bearer"||e.kind==="oauth2ClientCredentials"?{header:"Authorization",value:N(t)}:{header:"Authorization",value:t}}function N(e){const t=e.trim();return t.toLowerCase().startsWith("bearer")?t:`Bearer ${t}`}function a(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function c(e){return`<!doctype html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
@@ -37,7 +37,7 @@ footer{border-top-color:#1f2937;color:#6b7280}
 </style>
 </head>
 <body><div class="card">${e}</div></body>
-</html>`}function d(e){return`<h1>\u{1F512} ${a(e)}</h1>`}function l(){return"<footer>Secured by Redocly &middot; credentials never enter the AI conversation</footer>"}function q(e,t){const n=e.hasExistingSecret?H(t):"";switch(e.auth.kind){case"bearer":return N(e.name,t,n);case"apiKey":return U(e.name,t,e.auth.header,n);case"oauth2ClientCredentials":return K(e.name,t,e.auth.scopes,n);default:return M(e.name,t,n)}}function H(e){return`
+</html>`}function d(e){return`<h1>\u{1F512} ${a(e)}</h1>`}function l(){return"<footer>Secured by Redocly &middot; credentials never enter the AI conversation</footer>"}function y(){return`<p class="hint">This link expires ${Math.round(x/6e4)} minutes after it was issued. If it stops working, ask your AI client for a new one.</p>`}function j(e,t){const n=e.hasExistingSecret?q(t):"";switch(e.auth.kind){case"bearer":return L(e.name,t,n);case"apiKey":return U(e.name,t,e.auth.header,n);case"oauth2ClientCredentials":return G(e.name,t,e.auth.scopes,n);default:return K(e.name,t,n)}}function q(e){return`
 <div class="section">
 <h2>Remove stored credentials</h2>
 <p class="hint">This API already has credentials stored. Save above to replace them, or remove them to make calls anonymous again.</p>
@@ -46,7 +46,7 @@ footer{border-top-color:#1f2937;color:#6b7280}
 <input type="hidden" name="mode" value="clear">
 <button class="danger" type="submit">Remove credentials</button>
 </form>
-</div>`}function N(e,t,n){return c(`
+</div>`}function L(e,t,n){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
 <form method="post" action="/mcp/credentials" autocomplete="off">
@@ -58,6 +58,7 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${n}
+${y()}
 ${l()}`)}function U(e,t,n,o){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>${a(n)}</code> header. It never passes through the AI conversation.</p>
@@ -69,7 +70,8 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${o}
-${l()}`)}function K(e,t,n,o){const r=n.length>0?n.map(a).join(", "):"default scopes";return c(`
+${y()}
+${l()}`)}function G(e,t,n,o){const r=n.length>0?n.map(a).join(", "):"default scopes";return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Paste a token you already have, or let us exchange client credentials for one via OAuth2 client_credentials.</p>
 <div class="section">
@@ -97,7 +99,8 @@ ${d(`Credentials for ${e}`)}
 </form>
 </div>
 ${o}
-${l()}`)}function M(e,t,n){return c(`
+${y()}
+${l()}`)}function K(e,t,n){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">The value is stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and is sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
 <form method="post" action="/mcp/credentials" autocomplete="off">
@@ -108,13 +111,14 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${n}
+${y()}
 ${l()}`)}function D(e){return c(`
 ${d("Credentials removed")}
 <p>The stored credentials for ${a(e)} are gone. Calls to that API are anonymous again until you add new ones.</p>
-${l()}`)}function x(e){return c(`
+${l()}`)}function A(e){return c(`
 ${d("Credentials saved")}
-<p>Credentials for ${a(e)} are set for this session. Return to your AI client and continue - confirm the elicitation prompt if it is still open.</p>
+<p>Credentials for ${a(e)} are saved. Go back to your AI client and ask it to retry - or confirm the prompt it left open, if there is one. You can close this tab.</p>
 ${l()}`)}function f(e){return new Response(c(`
 ${d("Exchange failed")}
 <p>We could not exchange your client credentials for a token for ${a(e)}. This link has been used up - go back to your AI client and request a new link, then try again.</p>
-${l()}`),{status:502,headers:p})}function u(){return new Response(c(`${d("Link expired")}<p>This credentials link is invalid or has expired. Retry the request in your AI client to get a fresh link.</p>${l()}`),{status:404,headers:p})}var J=R;export{J as default,Y as setCredentialsFetchImpl};
+${l()}`),{status:502,headers:p})}function u(){return new Response(c(`${d("Link expired")}<p>This credentials link is invalid, already used, or older than ${Math.round(x/6e4)} minutes. Retry the request in your AI client to get a fresh link.</p>${l()}`),{status:404,headers:p})}var V=F;export{V as default,Q as setCredentialsFetchImpl};

package/dist/server/plugins/mcp/servers/docs-server.js

@@ -1 +1 @@
-import{fromJsonSchema as C}from"@modelcontextprotocol/server";import{logger as A}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as b,MCP_TOOL_IS_AVAILABLE_KEY as g}from"../../../workers/mcp-tool-worker-pool.js";import{CREATE_ANONYMOUS_SESSION_TOOL_NAME as M}from"../constants.js";import{isAnonymousSessionToolAvailable as T}from"../docs-mcp/tools/core/create-anonymous-session.js";import{isManageApiCredentialsToolAvailable as v,manageApiCredentials as L,manageApiCredentialsSchema as D}from"../codemode/tools/manage-credentials.js";import{EXECUTE_TOOL_SCHEMA as y}from"../codemode/tools/execute-schema.js";import{EXECUTE_TOOL_NAME as h,DESCRIBE_TOOLS_TOOL_NAME as I,CODE_MODE_TOOL_NAMES as N,FETCH_TOOL_NAME as H}from"../codemode/constants.js";import{buildCodeModeInstructions as k,buildExecuteDescription as w,DESCRIBE_TOOLS_DESCRIPTION as x}from"../codemode/prompts.js";import{composeExecuteAnnotations as F,getActiveCapabilities as R}from"../codemode/capabilities/index.js";import{describeToolsSchema as P,describeTools as B}from"../codemode/tools/describe-tools.js";import{mcpJsonSchemaValidator as U}from"../utils/json-schema-validator.js";import{connectMcpServer as z,createMcpServer as J,createToolDispatch as V,extractSerializableContext as X}from"./mcp-server.js";function Y(s){const t=y.schema;if(T(s))return t;const{sessionHandle:i,...c}=t.properties;return{...t,properties:c}}function $(s,t){const i=t.schema;if(T(s))return i;const{sessionHandle:c,...l}=i.properties;return{...i,properties:l}}async function se({name:s,tools:t,context:i,skills:c=[],getKv:l}){const m=i.mcpMode==="code",p=m?R(i):[],u=p.some(e=>e.id===H),O=m&&v(i),{server:r,transport:_}=J(s,m?k(u):void 0),a=e=>C(e,U),d=X(i),E={getClientCapabilities:()=>r.server.getClientCapabilities(),getKv:l},f=V(d,E),S=async e=>{try{return await b.exec(g,[{toolName:e,context:d}],{timeout:1e4})}catch(o){return A.error(`Failed to check MCP tool availability for "${e}": ${o instanceof Error?o.message:String(o)}`),!1}};if(m){const e=t.filter(n=>!N.has(n.name));r.registerTool(h,{description:w(u),inputSchema:a(Y(i)),annotations:F(p)},f(h)),r.registerTool(I,{description:x,inputSchema:a(P(e,p))},B(e,S,p,i));const o=t.find(n=>n.name===M);if(o&&T(i)&&r.registerTool(o.name,{description:o.description,inputSchema:a(o.schema),annotations:o.annotations??{title:o.name}},f(o.name)),O){const n=D(i);r.registerTool(n.name,{description:n.description,inputSchema:a($(i,n)),annotations:n.annotations??{title:n.name}},L(d,E))}}else await Promise.all(t.map(async e=>{const o=r.registerTool(e.name,{description:e.description,inputSchema:a(e.schema),annotations:e.annotations||{title:e.name}},f(e.name));await S(e.name)||o.disable()}));for(const e of c)r.registerResource(e.slug,e.uri,{title:e.name,description:e.description,mimeType:"text/markdown"},async()=>({contents:[{uri:e.uri,mimeType:"text/markdown",text:e.content}]}));return z(r,_)}export{se as createDocsMcpServer};
+import{fromJsonSchema as A}from"@modelcontextprotocol/server";import{logger as b}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as g,MCP_TOOL_IS_AVAILABLE_KEY as M}from"../../../workers/mcp-tool-worker-pool.js";import{CREATE_ANONYMOUS_SESSION_TOOL_NAME as L}from"../constants.js";import{isAnonymousSessionToolAvailable as T}from"../docs-mcp/tools/core/create-anonymous-session.js";import{isManageApiCredentialsToolAvailable as v,manageApiCredentials as D,manageApiCredentialsSchema as y}from"../codemode/tools/manage-credentials.js";import{EXECUTE_TOOL_SCHEMA as I}from"../codemode/tools/execute-schema.js";import{EXECUTE_TOOL_NAME as O,DESCRIBE_TOOLS_TOOL_NAME as N,CODE_MODE_TOOL_NAMES as H,FETCH_TOOL_NAME as k}from"../codemode/constants.js";import{buildCodeModeInstructions as w,buildExecuteDescription as x,DESCRIBE_TOOLS_DESCRIPTION as F}from"../codemode/prompts.js";import{toToolListEntries as R}from"../codemode/build-tool-list.js";import{composeExecuteAnnotations as P,getActiveCapabilities as B}from"../codemode/capabilities/index.js";import{describeToolsSchema as U,describeTools as z}from"../codemode/tools/describe-tools.js";import{mcpJsonSchemaValidator as J}from"../utils/json-schema-validator.js";import{connectMcpServer as V,createMcpServer as X,createToolDispatch as Y,extractSerializableContext as $}from"./mcp-server.js";function K(r){const t=I.schema;if(T(r))return t;const{sessionHandle:i,...m}=t.properties;return{...t,properties:m}}function W(r,t){const i=t.schema;if(T(r))return i;const{sessionHandle:m,...p}=i.properties;return{...i,properties:p}}async function me({name:r,tools:t,context:i,skills:m=[],getKv:p}){const s=i.mcpMode==="code",a=s?B(i):[],E=a.some(e=>e.id===k),l=s?t.filter(e=>!H.has(e.name)):[],u=R(l,a),_=s&&v(i),{server:n,transport:C}=X(r,s?w(E,u):void 0),c=e=>A(e,J),d=$(i),S={getClientCapabilities:()=>n.server.getClientCapabilities(),getKv:p},f=Y(d,S),h=async e=>{try{return await g.exec(M,[{toolName:e,context:d}],{timeout:1e4})}catch(o){return b.error(`Failed to check MCP tool availability for "${e}": ${o instanceof Error?o.message:String(o)}`),!1}};if(s){n.registerTool(O,{description:x(E,u),inputSchema:c(K(i)),annotations:P(a)},f(O)),n.registerTool(N,{description:F,inputSchema:c(U(l,a))},z(l,h,a,i));const e=t.find(o=>o.name===L);if(e&&T(i)&&n.registerTool(e.name,{description:e.description,inputSchema:c(e.schema),annotations:e.annotations??{title:e.name}},f(e.name)),_){const o=y(i);n.registerTool(o.name,{description:o.description,inputSchema:c(W(i,o)),annotations:o.annotations??{title:o.name}},D(d,S))}}else await Promise.all(t.map(async e=>{const o=n.registerTool(e.name,{description:e.description,inputSchema:c(e.schema),annotations:e.annotations||{title:e.name}},f(e.name));await h(e.name)||o.disable()}));for(const e of m)n.registerResource(e.slug,e.uri,{title:e.name,description:e.description,mimeType:"text/markdown"},async()=>({contents:[{uri:e.uri,mimeType:"text/markdown",text:e.content}]}));return V(n,C)}export{me as createDocsMcpServer};

package/dist/server/plugins/mcp/servers/mcp-server.d.ts

@@ -14,6 +14,7 @@ export declare function connectMcpServer(server: McpServer, transport: WebStanda
 export type ToolDispatchDeps = {
     getClientCapabilities: () => {
         elicitation?: {
+            form?: unknown;
             url?: unknown;
         };
     } | undefined;

package/dist/server/plugins/mcp/servers/mcp-server.js

@@ -1,3 +1,3 @@
-import{McpServer as T,WebStandardStreamableHTTPServerTransport as q}from"@modelcontextprotocol/server";import{logger as b}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as v,MCP_TOOL_WORKER_KEY as I}from"../../../workers/mcp-tool-worker-pool.js";import{SSE_KEEPALIVE_INTERVAL_MS as R}from"../constants.js";import{secretStore as _}from"../gateway-mcp/secret-store.js";import{readAuthRequiredMeta as A,stripAuthRequiredMeta as h}from"../gateway-mcp/upstream-auth.js";import{buildCredentialsToolHint as O,buildUpstreamCredentialFallback as w,buildUpstreamCredentialInputRequired as U,isCredentialElicitationDeclined as D,targetOf as C}from"../gateway-mcp/elicitation.js";import{resolveUpstreamAuthScheme as K}from"../gateway-mcp/upstream-auth-scheme.js";import{MISSING_SESSION_HANDLE_MESSAGE as P,resolveSecretSubject as j}from"../gateway-mcp/subject.js";const L=6e4,g=new Map;function x(e,t){const r=g.get(e);if(r)return r;const n=t().finally(()=>{g.delete(e)});return g.set(e,n),n}function z(e,t){const r=new T({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...t?{instructions:t}:{}}),n=new q({keepAliveMs:R,sessionIdGenerator:void 0});return{server:r,transport:n}}async function ee(e,t){return await e.connect(t),{server:e,transport:t,cleanup:async()=>{t.close()}}}function te(e,t){return r=>async(n,a)=>{b.info(`MCP tool called: ${r}`);const i=e.elicitationEnabled??!1,u=a.mcpReq.envelope!==void 0,o=i?j(e.user,n.sessionHandle):{kind:"anonymous"},s=o.kind==="resolved"?o.subject:void 0;if(o.kind==="invalid")return{content:[{type:"text",text:o.message}],isError:!0};const d=async()=>{if(!(!i||!s||!t?.getKv))try{const c=await t.getKv();return await _.getSecretsForSubject(c,s)}catch(c){b.warn(`gateway mcp secret store error, continuing unauthenticated: ${String(c)}`);return}};let m;const S=async()=>{m=await d();const c={toolName:r,args:n,context:{...e,upstreamSecrets:m},extra:$(a)};return await v.exec(I,[c],{timeout:L})};let p=await S();const l=A(p);if(l.length>0&&i&&!s)return h({...p,content:[{type:"text",text:P}],isError:!0});if(l.length>0&&i&&s&&t?.getKv){const c=await t.getKv(),E=new Set(Object.keys(m??{})),f=u?await H(e,a,l,s,c,E,t):await N(e,l,s,c,E);switch(f.kind){case"inputRequired":return f.result;case"retry":p=await S();break;case"appendText":p={...p,content:[...p.content,{type:"text",text:f.text}]};break;case"none":break}}return h(p)}}function F(e){return!!e?.getClientCapabilities()?.elicitation?.url}function k(e,t){return e.status===401&&!t.has(e.api)}function y(e){return e.map(O).join(`
+import{McpServer as T,WebStandardStreamableHTTPServerTransport as q}from"@modelcontextprotocol/server";import{logger as g}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as v,MCP_TOOL_WORKER_KEY as I}from"../../../workers/mcp-tool-worker-pool.js";import{SSE_KEEPALIVE_INTERVAL_MS as R}from"../constants.js";import{secretStore as _}from"../gateway-mcp/secret-store.js";import{readAuthRequiredMeta as A,stripAuthRequiredMeta as h}from"../gateway-mcp/upstream-auth.js";import{buildCredentialsToolHint as O,buildUpstreamCredentialFallback as w,buildUpstreamCredentialInputRequired as U,isCredentialElicitationDeclined as C,targetOf as D}from"../gateway-mcp/elicitation.js";import{resolveUpstreamAuthScheme as j}from"../gateway-mcp/upstream-auth-scheme.js";import{MISSING_SESSION_HANDLE_MESSAGE as K,resolveSecretSubject as P}from"../gateway-mcp/subject.js";const L=6e4,S=new Map;function $(e,t){const r=S.get(e);if(r)return r;const n=t().finally(()=>{S.delete(e)});return S.set(e,n),n}function ee(e,t){const r=new T({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...t?{instructions:t}:{}}),n=new q({keepAliveMs:R,sessionIdGenerator:void 0});return{server:r,transport:n}}async function te(e,t){return await e.connect(t),{server:e,transport:t,cleanup:async()=>{t.close()}}}function re(e,t){return r=>async(n,a)=>{g.info(`MCP tool called: ${r}`);const i=e.elicitationEnabled??!1,s=a.mcpReq.envelope!==void 0,c=i?P(e.user,n.sessionHandle):{kind:"anonymous"},o=c.kind==="resolved"?c.subject:void 0;if(c.kind==="invalid")return{content:[{type:"text",text:c.message}],isError:!0};const d=async()=>{if(!(!i||!o||!t?.getKv))try{const u=await t.getKv();return await _.getSecretsForSubject(u,o)}catch(u){g.warn(`gateway mcp secret store error, continuing unauthenticated: ${String(u)}`);return}};let m;const E=async()=>{m=await d();const u={toolName:r,args:n,context:{...e,upstreamSecrets:m},extra:N(a)};return await v.exec(I,[u],{timeout:L})};let p=await E();const l=A(p);if(l.length>0&&i&&!o)return h({...p,content:[{type:"text",text:K}],isError:!0});if(l.length>0&&i&&o&&t?.getKv){g.info(`gateway mcp credentials prompt: era=${s?"2026-07-28":"2025"} clientElicitation=${F(t)}`);const u=await t.getKv(),b=new Set(Object.keys(m??{})),f=s?await H(e,a,l,o,u,b,t):await B(e,l,o,u,b);switch(f.kind){case"inputRequired":return f.result;case"retry":p=await E();break;case"prependText":p={...p,content:[{type:"text",text:f.text},...p.content],isError:!0};break;case"none":break}}return h(p)}}function x(e){return!!e?.getClientCapabilities()?.elicitation?.url}function F(e){const t=e?.getClientCapabilities()?.elicitation;if(!t)return"none";const r=[t.form?"form":void 0,t.url?"url":void 0].filter(Boolean);return r.length>0?r.join("+"):"none"}function k(e,t){return e.status===401&&!t.has(e.api)}function y(e){return e.map(O).join(`
 
-`)}async function M(e,t,r,n){const[a,...i]=t;return{subject:r,baseUrl:e.baseUrl??"",target:C(a),auth:await K(e,a.api),kv:n,hasExistingSecret:!1,reason:{kind:"authFailure",status:a.status,otherApiNames:i.map(u=>u.name)}}}async function H(e,t,r,n,a,i,u){if(D(t.mcpReq.inputResponses))return{kind:"none"};const o=r.filter(d=>k(d,i));if(o.length===0)return{kind:"appendText",text:y(r)};const s=await M(e,o,n,a);return F(u)?{kind:"inputRequired",result:await U(s)}:{kind:"appendText",text:await w(s)}}async function N(e,t,r,n,a){const i=t.filter(s=>k(s,a));if(i.length===0)return{kind:"appendText",text:y(t)};const u=await M(e,i,r,n);return{kind:"appendText",text:await x(`${r}:${i[0].api}`,()=>w(u))}}function $(e){return{sessionId:e.sessionId,authInfo:e.http?.authInfo,requestId:e.mcpReq.id,_meta:e.mcpReq._meta}}function re(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization,mcpMode:e.mcpMode,elicitationEnabled:e.elicitationEnabled,gatewayFetchBudgetPerExec:e.gatewayFetchBudgetPerExec,clientIp:e.clientIp,upstreamSecrets:e.upstreamSecrets}}export{ee as connectMcpServer,z as createMcpServer,te as createToolDispatch,re as extractSerializableContext};
+`)}async function M(e,t,r,n){const[a,...i]=t;return{subject:r,baseUrl:e.baseUrl??"",target:D(a),auth:await j(e,a.api),kv:n,hasExistingSecret:!1,reason:{kind:"authFailure",status:a.status,otherApiNames:i.map(s=>s.name)}}}async function H(e,t,r,n,a,i,s){if(C(t.mcpReq.inputResponses))return{kind:"none"};const c=r.filter(d=>k(d,i));if(c.length===0)return{kind:"prependText",text:y(r)};const o=await M(e,c,n,a);return x(s)?{kind:"inputRequired",result:await U(o)}:{kind:"prependText",text:await w(o)}}async function B(e,t,r,n,a){const i=t.filter(o=>k(o,a));if(i.length===0)return{kind:"prependText",text:y(t)};const s=await M(e,i,r,n);return{kind:"prependText",text:await $(`${r}:${i[0].api}`,()=>w(s))}}function N(e){return{sessionId:e.sessionId,authInfo:e.http?.authInfo,requestId:e.mcpReq.id,_meta:e.mcpReq._meta}}function ne(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization,mcpMode:e.mcpMode,elicitationEnabled:e.elicitationEnabled,gatewayFetchBudgetPerExec:e.gatewayFetchBudgetPerExec,clientIp:e.clientIp,upstreamSecrets:e.upstreamSecrets}}export{te as connectMcpServer,ee as createMcpServer,re as createToolDispatch,ne as extractSerializableContext};

package/dist/server/plugins/mcp/workers/execute-mcp-tool.js

@@ -1 +1 @@
-import{telemetry as m}from"../../../telemetry/index.js";import{mcpToolHandlers as d}from"../../../../client/mcp-tool-handlers-entry.js";import{McpServerType as f}from"../constants.js";import{EXECUTE_TOOL_NAME as y}from"../codemode/constants.js";import{reportMcpToolCalled as x,reportMcpToolError as p}from"./mcp-tool-telemetry.js";function w(e){return e.content.map(o=>o.type==="text"?o.text:"")}async function _(e){m.initialize();const{toolName:o,args:c,context:i,extra:r}=e,s=i?.mcpMode??"tools",n=performance.now();try{const t=d[o];if(!t)throw new Error(`Unknown MCP tool: ${o}`);const{default:h}=await t(),l=h[o];if(!l)throw new Error(`MCP tool module does not export a handler for "${o}". Expected \`export default { '${o}': handler }\`.`);const a=await(typeof l=="function"?l:l.execute)(c,i,r);if(!E(a))throw new Error(`MCP tool "${o}" returned an invalid result.`);const u=Math.round(performance.now()-n);if(a.isError)p({tool:o,message:w(a).join(" "),mode:s,serverType:f.Docs,durationMs:u,errorClass:o===y?"sandbox_error":"tool_error"});else{const M=w(a).join("").length;x({tool:o,mode:s,serverType:f.Docs,durationMs:u,outputLength:M})}return a}catch(t){throw p({tool:o,message:t instanceof Error?t.message:String(t),mode:s,serverType:f.Docs,durationMs:Math.round(performance.now()-n),stack:t instanceof Error&&t.stack||"",errorClass:"server_error"}),t}}function E(e){return!e||typeof e!="object"?!1:Array.isArray(e.content)}async function k(e){m.initialize();const{toolName:o,context:c}=e,i=performance.now();try{const r=d[o];if(!r)return!1;const{default:s}=await r(),n=s[o];return n?typeof n=="object"&&typeof n.isAvailable=="function"?await n.isAvailable(c):!0:!1}catch(r){throw p({tool:o,message:"Failed to check if MCP tool is available: "+(r instanceof Error?r.message:String(r)),mode:c?.mcpMode??"tools",serverType:f.Docs,durationMs:Math.round(performance.now()-i),stack:r instanceof Error&&r.stack||"",errorClass:"server_error"}),r}}export{_ as executeMcpTool,k as isMcpToolAvailable};
+import{telemetry as h}from"../../../telemetry/index.js";import{mcpToolHandlers as y}from"../../../../client/mcp-tool-handlers-entry.js";import{McpServerType as c}from"../constants.js";import{EXECUTE_TOOL_NAME as T}from"../codemode/constants.js";import{logMcpToolCallAudit as M,reportMcpToolCalled as C,reportMcpToolError as u}from"./mcp-tool-telemetry.js";function E(e){return e.content.map(o=>o.type==="text"?o.text:"")}async function j(e){h.initialize();const{toolName:o,args:a,context:l,extra:r}=e,n=l?.mcpMode??"tools",s=performance.now();try{const t=y[o];if(!t)throw new Error(`Unknown MCP tool: ${o}`);const{default:x}=await t(),i=x[o];if(!i)throw new Error(`MCP tool module does not export a handler for "${o}". Expected \`export default { '${o}': handler }\`.`);const f=await(typeof i=="function"?i:i.execute)(a,l,r);if(!v(f))throw new Error(`MCP tool "${o}" returned an invalid result.`);const m=Math.round(performance.now()-s),p=f.isError?o===T?"sandbox_error":"tool_error":void 0,d=E(f),w=d.join("");return M({tool:o,mode:n,serverType:c.Docs,args:a,result:w,errorClass:p}),p?u({tool:o,message:d.join(" "),mode:n,serverType:c.Docs,durationMs:m,errorClass:p}):C({tool:o,mode:n,serverType:c.Docs,durationMs:m,outputLength:w.length}),f}catch(t){throw M({tool:o,mode:n,serverType:c.Docs,args:a,errorClass:"server_error"}),u({tool:o,message:t instanceof Error?t.message:String(t),mode:n,serverType:c.Docs,durationMs:Math.round(performance.now()-s),stack:t instanceof Error&&t.stack||"",errorClass:"server_error"}),t}}function v(e){return!e||typeof e!="object"?!1:Array.isArray(e.content)}async function P(e){h.initialize();const{toolName:o,context:a}=e,l=performance.now();try{const r=y[o];if(!r)return!1;const{default:n}=await r(),s=n[o];return s?typeof s=="object"&&typeof s.isAvailable=="function"?await s.isAvailable(a):!0:!1}catch(r){throw u({tool:o,message:"Failed to check if MCP tool is available: "+(r instanceof Error?r.message:String(r)),mode:a?.mcpMode??"tools",serverType:c.Docs,durationMs:Math.round(performance.now()-l),stack:r instanceof Error&&r.stack||"",errorClass:"server_error"}),r}}export{j as executeMcpTool,P as isMcpToolAvailable};

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.d.ts

@@ -15,6 +15,17 @@ export type McpErrorClass = 'tool_error' | 'sandbox_error' | 'server_error';
 export declare function reportMcpToolCalled({ tool, mode, serverType, durationMs, outputLength, }: McpToolEvent & {
     outputLength: number;
 }): void;
+/**
+ * Arguments and result identity for one MCP tool call. `tool` and `mode` repeat the
+ * `mcpServer.toolCalled` telemetry event so a Grafana row joins onto this line; `args_sha256`
+ * identifies the invocation. The result body itself is never recorded — a tool can return
+ * credentials no pattern will recognise — so only its digest lands here.
+ */
+export declare function logMcpToolCallAudit({ tool, mode, serverType, args, result, errorClass, }: Omit<McpToolEvent, 'durationMs'> & {
+    args: unknown;
+    result?: string;
+    errorClass?: McpErrorClass;
+}): void;
 export declare function reportMcpToolError({ tool, mode, serverType, durationMs, message, stack, errorClass, }: McpToolEvent & {
     message: string;
     stack?: string;

package/dist/server/plugins/mcp/workers/mcp-tool-telemetry.js

@@ -1 +1 @@
-import{telemetry as p}from"../../../telemetry/index.js";import{serverAttributes as l}from"../utils/telemetry-attributes.js";function m({tool:r,mode:o,serverType:e,durationMs:t,outputLength:s}){p.sendMcpToolCalledMessage([{...l(e),tool:r,mode:o,output_length:s,duration_ms:t}])}function u({tool:r,mode:o,serverType:e,durationMs:t,message:s,stack:n="",errorClass:a}){p.sendMcpErrorMessage([{...l(e),tool:r,message:s,stack:n,error_class:a,mode:o,duration_ms:t}])}export{m as reportMcpToolCalled,u as reportMcpToolError};
+import{telemetry as u}from"../../../telemetry/index.js";import{serverAttributes as l}from"../utils/telemetry-attributes.js";import{EXECUTE_TOOL_NAME as c}from"../codemode/constants.js";import{auditInput as d,auditOutputDigest as p,auditSha256 as f,logAuditRecord as g}from"../audit/audit-log.js";function E({tool:r,mode:e,serverType:o,durationMs:s,outputLength:t}){u.sendMcpToolCalledMessage([{...l(o),tool:r,mode:e,output_length:t,duration_ms:s}])}function T({tool:r,mode:e,serverType:o,args:s,result:t,errorClass:n}){if(r===c)return;const i=m(s),a=t===void 0?void 0:p(t);g("Record MCP tool call",{tool:r,mode:e,server_type:o,error_class:n,args_sha256:f(i),args:d(i),result_sha256:a?.sha256,result_bytes:a?.bytes})}function m(r){try{return JSON.stringify(r)??String(r)}catch{return"\xAB[unserializable]\xBB"}}function A({tool:r,mode:e,serverType:o,durationMs:s,message:t,stack:n="",errorClass:i}){u.sendMcpErrorMessage([{...l(o),tool:r,message:t,stack:n,error_class:i,mode:e,duration_ms:s}])}export{T as logMcpToolCallAudit,E as reportMcpToolCalled,A as reportMcpToolError};

package/dist/server/tools/notifiers/formatter.d.ts

@@ -6,6 +6,7 @@ type LogData = {
     duration?: number;
     context?: LoggerContext;
     scope?: ErrorScope;
+    preSanitized?: boolean;
 };
 export declare enum LogLevel {
     INFO = "INFO",