@redocly/realm 0.136.0-next.14 → 0.136.0-next.15

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @redocly/realm
 
+## 0.136.0-next.15
+
+### Patch Changes
+
+- 1f5d5014e53: Fixed an issue where sidebar items configured with `separatorLine: true` drew their line above the item instead of below it.
+- e0f58876734: Fixed credential handling in the gateway MCP for clients without URL-mode elicitation.
+  Instructions provide correct links, credential errors are flagged, and credential pages display link validity duration.
+- Updated dependencies [1f5d5014e53]
+  - @redocly/theme@0.68.0-next.9
+  - @redocly/api-docs@0.1.0-next.7
+  - @redocly/asyncapi-docs@1.13.0-next.13
+  - @redocly/graphql-docs@1.13.0-next.13
+  - @redocly/openapi-docs@3.24.0-next.13
+  - @redocly/portal-plugin-mock-server@0.21.0-next.13
+
 ## 0.136.0-next.14
 
 ### Patch Changes

package/dist/server/plugins/mcp/codemode/capabilities/fetch/index.js

@@ -1,4 +1,4 @@
-import{getCallableApis as a,isFetchCapable as s}from"../../../gateway-mcp/fetch-capability.js";import{FETCH_TOOL_NAME as i}from"../../constants.js";const l=["```ts","/**"," * Call a documented API. Only the callable APIs' documented hosts are reachable."," * Responses cap at 1 MiB and redirects are not followed."," */","declare function fetch(url: string, init?: {","  method?: string;","  /** `content-type` is set automatically for URLSearchParams/FormData unless you set one. */","  headers?: Record<string, string>;","  /** string \xB7 URLSearchParams (\u2192 application/x-www-form-urlencoded) \xB7 FormData (\u2192 multipart/form-data) */","  body?: string | URLSearchParams | FormData;","}): Promise<{","  status: number;","  statusText: string;","  ok: boolean;","  headers: { get(name: string): string | null };","  json(): Promise<unknown>;","  text(): Promise<string>;","}>;","```"].join(`
-`),c=["Example - List the write endpoints of an API and call one of them with `fetch`:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const ep = endpoints.find((e) => e.method === 'POST' && e.path.includes('invoices'));","const info = await tools.getEndpointInfo({ name: items[0].name, path: ep.path, method: ep.method });","const url = (info.servers?.[0]?.url ?? '') + ep.path;","try {","  const res = await fetch(url, { method: 'POST', body: JSON.stringify({ /* fields from info */ }) });","  return res.ok ? await res.json() : { status: res.status, error: await res.text() };","} catch (error) {","  return { error: error instanceof Error ? error.message : String(error), endpointId: info };","}","```"].join(`
-`);function d(r){const t=new Map;for(const{name:e,version:n}of r){if(!e)continue;const o=t.get(e)??[];n&&o.push(n),t.set(e,o)}return[...t.entries()].map(([e,n])=>n.length>1?`${e} (${n.map(o=>`v${o}`).join(", ")})`:e).join(", ")}const h={id:i,purpose:"Call the documented APIs over HTTP",isActive:s,annotations:{readOnlyHint:!1,destructiveHint:!0,openWorldHint:!0},renderSection(r){const t=d(a(r));return["## `fetch` \u2014 call the documented APIs","",l,"","Always call `getEndpointInfo` before `fetch` for the exact URL, required parameters, and body shape. Never guess.","",`Callable APIs (their documented hosts are reachable via \`fetch\`): ${t}`,"",c].join(`
+import{getCallableApis as s,isFetchCapable as o}from"../../../gateway-mcp/fetch-capability.js";import{FETCH_TOOL_NAME as i}from"../../constants.js";const l=["```ts","/**"," * Call a documented API. Only the callable APIs' documented hosts are reachable."," * Responses cap at 1 MiB and redirects are not followed."," */","declare function fetch(url: string | URL, init?: {","  method?: string;","  /** `content-type` is set automatically for URLSearchParams/FormData unless you set one. */","  headers?: Record<string, string>;","  /** string \xB7 URLSearchParams (\u2192 application/x-www-form-urlencoded) \xB7 FormData (\u2192 multipart/form-data) */","  body?: string | URLSearchParams | FormData;","}): Promise<{","  status: number;","  statusText: string;","  ok: boolean;","  headers: { get(name: string): string | null };","  json(): Promise<unknown>;","  text(): Promise<string>;","}>;","```"].join(`
+`),c=["Example - list the paid invoices of a billing API:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const ep = endpoints.find((e) => e.method === 'GET' && e.path.includes('invoices'));","const info = await tools.getEndpointInfo({ name: items[0].name, path: ep.path, method: ep.method });","const url = new URL((info.servers?.[0]?.url ?? '') + ep.path);","// Every name below comes from `info.endpoint.parameters` - read them first, never guess them.","url.searchParams.set('filter', 'status:paid');","url.searchParams.set('sort', '-createdTime');","url.searchParams.set('limit', '100');","try {","  const res = await fetch(url, { method: ep.method });","  return res.ok ? await res.json() : { status: res.status, error: await res.text() };","} catch (error) {","  return { error: error instanceof Error ? error.message : String(error), endpointId: info };","}","```"].join(`
+`);function m(a){const t=new Map;for(const{name:e,version:r}of a){if(!e)continue;const n=t.get(e)??[];r&&n.push(r),t.set(e,n)}return[...t.entries()].map(([e,r])=>r.length>1?`${e} (${r.map(n=>`v${n}`).join(", ")})`:e).join(", ")}const h={id:i,purpose:"Call the documented APIs over HTTP",isActive:o,annotations:{readOnlyHint:!1,destructiveHint:!0,openWorldHint:!0},renderSection(a){const t=m(s(a));return["## `fetch` \u2014 call the documented APIs","",l,"","Always call `getEndpointInfo` before `fetch` for the exact URL, required parameters, and body shape. Put filtering, sorting, and paging in the query parameters, and keep sandbox JS for what the endpoint cannot express. Never guess.","",`Callable APIs (their documented hosts are reachable via \`fetch\`): ${t}`,"",c].join(`
 `)}};export{l as FETCH_DECLARATION,h as fetchCapability};

package/dist/server/plugins/mcp/codemode/prompts.js

@@ -1,5 +1,5 @@
 import{buildToolList as i}from"./build-tool-list.js";const l=2048,c="Both `execute` arguments are required: `code` (the JavaScript to run; return a value to receive it) and `description` (a short human-readable summary of what the code does).",n="Available tools (exact signatures come from `describe-tools`):";function a(e,t){if(t.length===0)return e;const o=l-e.length-n.length-3,s=i(t,o);return s?[e,"",n,s].join(`
-`):e}function h(e,t=[]){const o=["Run JavaScript in a sandbox against the documentation tools on the global `tools` object.",e?"The only extra globals are `tools` and `fetch` - there is no `console`, `setTimeout`, `require`, or Node.js API; all other I/O goes through `tools`.":"The only extra global is `tools` - there is no `fetch`, `console`, `setTimeout`, `require`, or Node.js API; all I/O goes through `tools`.","","Workflow - minimize round-trips; one `describe-tools` call plus one `execute` call covers most requests:","1. Analyze the request and decide which sandbox tools it needs.","2. Call `describe-tools` with those names to get their exact TypeScript signatures - inputs, result shapes, and a worked example. NEVER call `execute` with guessed method names, parameter names, enum values, or result field names: read fields off the declared return types, not from assumptions.","3. Batch everything into a SINGLE script: chain tool calls, pass one call's output into the next, process results in plain JavaScript, and `return` only what the request needs."].join(`
+`):e}function h(e,t=[]){const o=["Run JavaScript in a sandbox against the documentation tools on the global `tools` object.",e?"The extra globals are `tools`, `fetch`, `URL`, `URLSearchParams`, and `FormData` - there is no `console`, `setTimeout`, `require`, or Node.js API; all other I/O goes through `tools`.":"The only extra global is `tools` - there is no `fetch`, `console`, `setTimeout`, `require`, or Node.js API; all I/O goes through `tools`.","","Workflow - minimize round-trips; one `describe-tools` call plus one `execute` call covers most requests:","1. Analyze the request and decide which sandbox tools it needs.","2. Call `describe-tools` with those names to get their exact TypeScript signatures - inputs, result shapes, and a worked example. NEVER call `execute` with guessed method names, parameter names, enum values, or result field names: read fields off the declared return types, not from assumptions.","3. Batch everything into a SINGLE script: chain tool calls, pass one call's output into the next, process results in plain JavaScript, and `return` only what the request needs."].join(`
 `);return a(o,t)}const d=["Get the exact TypeScript signatures of the sandbox tools available to `execute`.","Analyze the user request first, then pass `tools` with only the tool names the request needs (every name is listed in this input schema / description); omit `tools` only when you cannot tell which tools apply.","Always call this before your first `execute` and never guess signatures. Request every tool the task may need in ONE call instead of calling this repeatedly."].join(`
 `);function u(e,t=[]){const o=["This server exposes documentation tools (API discovery, endpoint details, security schemes, full-text search) through two tools:","- `describe-tools` returns the exact TypeScript signatures of the sandbox tools.","- `execute` runs JavaScript that calls those tools on the global `tools` object.","Workflow: analyze the request, call `describe-tools` once with only the tool names it needs, then batch everything into a single `execute` script. Minimize round-trips and never guess tool signatures.",...e?["The sandbox also has a global `fetch` that can call the documented APIs (allow-listed hosts only). Include `fetch` in your `describe-tools` call to get its contract and the list of callable APIs."]:[]].join(`
 `);return a(o,t)}const p=["Example - list the write endpoints of an API:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const writes = endpoints.filter((e) => e.method !== 'GET');","return { api: items[0].name, writes: writes.map((e) => `${e.method} ${e.path}`) };","```"].join(`

package/dist/server/plugins/mcp/codemode/sandbox/create-sandbox-setup.js

@@ -1,4 +1,4 @@
-import{setupHostFunctions as a}from"../../../../sandbox/utils/setup-host-functions.js";import{evalGuestCode as p}from"../../../../sandbox/utils/eval-guest-code.js";import{SANDBOX_FETCH_SETUP as i}from"./polyfills.js";import{FETCH_BRIDGE_FUNCTION_NAME as u,FETCH_BRIDGE_GLOBAL_NAME as c,TOOLS_BRIDGE_GLOBAL_NAME as n}from"../constants.js";const m=100,f=50;function T(r,t){return(e,l)=>{const s=[a(e,r,{globalName:n,budget:l,maxCalls:m,messages:{outputTooLarge:o=>`Tool output is too large (${o} bytes); request narrower data instead`,callLimitExceeded:o=>`Exceeded the limit of ${o} tool calls`}})];return t&&s.push(a(e,{[u]:o=>t(o)},{globalName:c,budget:l,maxCalls:f,messages:{outputTooLarge:o=>`Response is too large (${o} bytes); request less data`,callLimitExceeded:o=>`Exceeded the limit of ${o} fetch calls`}})),p(e,E(!!t)),()=>{for(const o of s)o()}}}function E(r){const t=r?i:"",e=`globalThis[${JSON.stringify(n)}]`;return`(() => {${t}
+import{setupHostFunctions as a}from"../../../../sandbox/utils/setup-host-functions.js";import{evalGuestCode as p}from"../../../../sandbox/utils/eval-guest-code.js";import{SANDBOX_FETCH_SETUP as i}from"./polyfills/index.js";import{FETCH_BRIDGE_FUNCTION_NAME as u,FETCH_BRIDGE_GLOBAL_NAME as c,TOOLS_BRIDGE_GLOBAL_NAME as n}from"../constants.js";const m=100,f=50;function T(r,t){return(e,l)=>{const s=[a(e,r,{globalName:n,budget:l,maxCalls:m,messages:{outputTooLarge:o=>`Tool output is too large (${o} bytes); request narrower data instead`,callLimitExceeded:o=>`Exceeded the limit of ${o} tool calls`}})];return t&&s.push(a(e,{[u]:o=>t(o)},{globalName:c,budget:l,maxCalls:f,messages:{outputTooLarge:o=>`Response is too large (${o} bytes); request less data`,callLimitExceeded:o=>`Exceeded the limit of ${o} fetch calls`}})),p(e,E(!!t)),()=>{for(const o of s)o()}}}function E(r){const t=r?i:"",e=`globalThis[${JSON.stringify(n)}]`;return`(() => {${t}
     const tools = ${e};
     ${e} = new Proxy(tools, {
       get(target, prop) {

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/fetch-shim.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `fetch`: not a polyfill but a bridge. It takes the host rail off the global object so guest
+ * code cannot reach it directly, encodes the body, and hands the host a plain request.
+ */
+export declare const FETCH_SHIM = "\n  const hostFetch = globalThis.__fetchBridge.fetch;\n  delete globalThis.__fetchBridge;\n  // RFC 7578: a field name travels with its quote and line breaks escaped, so a name cannot close its own header and open a part the caller did not write.\n  const escapeFieldName = (name) =>\n    String(name).replace(\n      /[\"\\r\\n]/g,\n      (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'),\n    );\n  globalThis.fetch = (url, init = {}) => {\n    let body;\n    let autoContentType;\n    if (init.body instanceof URLSearchParams) {\n      body = init.body.toString();\n      autoContentType = 'application/x-www-form-urlencoded';\n    } else if (init.body instanceof FormData) {\n      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);\n      body = init.body._fields\n        .map(([k, v]) =>\n          '--' + boundary + '\\r\\nContent-Disposition: form-data; name=\"' + escapeFieldName(k) + '\"\\r\\n\\r\\n' + v,\n        )\n        .join('\\r\\n') + '\\r\\n--' + boundary + '--';\n      autoContentType = 'multipart/form-data; boundary=' + boundary;\n    } else if (init.body != null && typeof init.body !== 'string') {\n      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');\n    } else {\n      body = init.body ?? undefined;\n    }\n    const callerHeaders = init.headers;\n    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(\n      (k) => k.toLowerCase() === 'content-type',\n    );\n    const headers = autoContentType && !hasContentType\n      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)\n      : callerHeaders;\n    return hostFetch({ url: String(url), method: init.method, headers, body })\n      .then((res) => {\n        const resHeaders = res.headers || {};\n        return {\n          status: res.status,\n          statusText: res.statusText,\n          ok: res.ok,\n          headers: {\n            get: (name) => {\n              const value = resHeaders[String(name).toLowerCase()];\n              return value === undefined ? null : value;\n            },\n          },\n          json: () => Promise.resolve(JSON.parse(res.bodyText)),\n          text: () => Promise.resolve(res.bodyText),\n        };\n      });\n  };\n";
+//# sourceMappingURL=fetch-shim.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/fetch-shim.js

@@ -0,0 +1,54 @@
+import{FETCH_BRIDGE_FUNCTION_NAME as t,FETCH_BRIDGE_GLOBAL_NAME as e}from"../../constants.js";const n=`
+  const hostFetch = globalThis.${e}.${t};
+  delete globalThis.${e};
+  // RFC 7578: a field name travels with its quote and line breaks escaped, so a name cannot close its own header and open a part the caller did not write.
+  const escapeFieldName = (name) =>
+    String(name).replace(
+      /["\\r\\n]/g,
+      (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'),
+    );
+  globalThis.fetch = (url, init = {}) => {
+    let body;
+    let autoContentType;
+    if (init.body instanceof URLSearchParams) {
+      body = init.body.toString();
+      autoContentType = 'application/x-www-form-urlencoded';
+    } else if (init.body instanceof FormData) {
+      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);
+      body = init.body._fields
+        .map(([k, v]) =>
+          '--' + boundary + '\\r\\nContent-Disposition: form-data; name="' + escapeFieldName(k) + '"\\r\\n\\r\\n' + v,
+        )
+        .join('\\r\\n') + '\\r\\n--' + boundary + '--';
+      autoContentType = 'multipart/form-data; boundary=' + boundary;
+    } else if (init.body != null && typeof init.body !== 'string') {
+      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');
+    } else {
+      body = init.body ?? undefined;
+    }
+    const callerHeaders = init.headers;
+    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(
+      (k) => k.toLowerCase() === 'content-type',
+    );
+    const headers = autoContentType && !hasContentType
+      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)
+      : callerHeaders;
+    return hostFetch({ url: String(url), method: init.method, headers, body })
+      .then((res) => {
+        const resHeaders = res.headers || {};
+        return {
+          status: res.status,
+          statusText: res.statusText,
+          ok: res.ok,
+          headers: {
+            get: (name) => {
+              const value = resHeaders[String(name).toLowerCase()];
+              return value === undefined ? null : value;
+            },
+          },
+          json: () => Promise.resolve(JSON.parse(res.bodyText)),
+          text: () => Promise.resolve(res.bodyText),
+        };
+      });
+  };
+`;export{n as FETCH_SHIM};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/form-data.d.ts

@@ -0,0 +1,3 @@
+/** `FormData`: the multipart body the fetch shim serializes. */
+export declare const FORM_DATA_POLYFILL = "\n  const FormData = class FormData {\n    constructor() { this._fields = []; }\n    append(key, value) { this._fields.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      this._fields = this._fields.filter(([fk]) => fk !== k);\n      this._fields.push([k, v]);\n    }\n    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    has(key) { return this._fields.some(([k]) => k === String(key)); }\n    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }\n    entries() { return this._fields.values(); }\n    [Symbol.iterator]() { return this._fields.values(); }\n  };\n  globalThis.FormData = FormData;\n";
+//# sourceMappingURL=form-data.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/form-data.js

@@ -0,0 +1,17 @@
+const e=`
+  const FormData = class FormData {
+    constructor() { this._fields = []; }
+    append(key, value) { this._fields.push([String(key), String(value)]); }
+    set(key, value) {
+      const k = String(key), v = String(value);
+      this._fields = this._fields.filter(([fk]) => fk !== k);
+      this._fields.push([k, v]);
+    }
+    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
+    has(key) { return this._fields.some(([k]) => k === String(key)); }
+    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }
+    entries() { return this._fields.values(); }
+    [Symbol.iterator]() { return this._fields.values(); }
+  };
+  globalThis.FormData = FormData;
+`;export{e as FORM_DATA_POLYFILL};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/index.d.ts

@@ -0,0 +1,3 @@
+/** The guest prelude installed when the gateway fetch capability is on */
+export declare const SANDBOX_FETCH_SETUP: string;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/index.js

@@ -0,0 +1,2 @@
+import{FETCH_SHIM as o}from"./fetch-shim.js";import{FORM_DATA_POLYFILL as L}from"./form-data.js";import{URL_POLYFILL as r}from"./url.js";import{URL_SEARCH_PARAMS_POLYFILL as _}from"./url-search-params.js";const i=[_,r,L,o].join(`
+`);export{i as SANDBOX_FETCH_SETUP};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url-search-params.d.ts

@@ -0,0 +1,3 @@
+/** `URLSearchParams`: query-string parsing and serialization, and the store behind `URL.searchParams`. */
+export declare const URL_SEARCH_PARAMS_POLYFILL = "\n  // application/x-www-form-urlencoded reads '+' as a space, and leaves an escape it cannot read alone.\n  // Decoding one well-formed run at a time is what keeps a stray '%' \u2014 '?discount=50%', a half-encoded cursor \u2014 from throwing URIError and ending the run.\n  const decodeFormPart = (value) =>\n    value.replace(/\\+/g, ' ').replace(/(?:%[0-9A-Fa-f]{2})+/g, (escaped) => {\n      try { return decodeURIComponent(escaped); } catch (error) { return escaped; }\n    });\n\n  // The same rules in reverse: everything but alphanumerics and * - . _ is percent-encoded, and a space is '+'. encodeURIComponent keeps !'()~ literal, so those are encoded after it runs.\n  const encodeFormPart = (value) =>\n    encodeURIComponent(String(value))\n      .replace(/%20/g, '+')\n      .replace(/[!'()~]/g, (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase());\n\n  const URLSearchParams = class URLSearchParams {\n    constructor(init) {\n      this._params = [];\n      if (init == null) return;\n      if (typeof init === 'string') {\n        const str = init.startsWith('?') ? init.slice(1) : init;\n        for (const pair of (str ? str.split('&') : [])) {\n          if (pair === '') continue;\n          const eq = pair.indexOf('=');\n          const key = eq >= 0 ? pair.slice(0, eq) : pair;\n          const value = eq >= 0 ? pair.slice(eq + 1) : '';\n          this._params.push([decodeFormPart(key), decodeFormPart(value)]);\n        }\n      } else if (typeof init[Symbol.iterator] === 'function') {\n        // [['a', '1'], ['b', '2']] and another URLSearchParams both arrive here.\n        for (const [key, value] of init) this._params.push([String(key), String(value)]);\n      } else if (typeof init === 'object') {\n        for (const [key, value] of Object.entries(init)) this._params.push([key, String(value)]);\n      }\n    }\n    get size() { return this._params.length; }\n    append(key, value) { this._params.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      const at = this._params.findIndex(([pk]) => pk === k);\n      if (at === -1) { this._params.push([k, v]); return; }\n      // Overwrite where the key already sat, so an edit does not reorder the query the server sent.\n      this._params[at] = [k, v];\n      this._params = this._params.filter(([pk], index) => pk !== k || index === at);\n    }\n    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }\n    has(key) { return this._params.some(([k]) => k === String(key)); }\n    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }\n    forEach(callback, thisArg) {\n      for (const [k, v] of [...this._params]) callback.call(thisArg, v, k, this);\n    }\n    keys() { return this._params.map(([k]) => k).values(); }\n    values() { return this._params.map(([, v]) => v).values(); }\n    entries() { return this._params.map(([k, v]) => [k, v]).values(); }\n    sort() { this._params.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)); }\n    [Symbol.iterator]() { return this.entries(); }\n    toString() {\n      return this._params\n        .map(([k, v]) => encodeFormPart(k) + '=' + encodeFormPart(v))\n        .join('&');\n    }\n  };\n  globalThis.URLSearchParams = URLSearchParams;\n";
+//# sourceMappingURL=url-search-params.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url-search-params.js

@@ -0,0 +1,64 @@
+const e=`
+  // application/x-www-form-urlencoded reads '+' as a space, and leaves an escape it cannot read alone.
+  // Decoding one well-formed run at a time is what keeps a stray '%' \u2014 '?discount=50%', a half-encoded cursor \u2014 from throwing URIError and ending the run.
+  const decodeFormPart = (value) =>
+    value.replace(/\\+/g, ' ').replace(/(?:%[0-9A-Fa-f]{2})+/g, (escaped) => {
+      try { return decodeURIComponent(escaped); } catch (error) { return escaped; }
+    });
+
+  // The same rules in reverse: everything but alphanumerics and * - . _ is percent-encoded, and a space is '+'. encodeURIComponent keeps !'()~ literal, so those are encoded after it runs.
+  const encodeFormPart = (value) =>
+    encodeURIComponent(String(value))
+      .replace(/%20/g, '+')
+      .replace(/[!'()~]/g, (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase());
+
+  const URLSearchParams = class URLSearchParams {
+    constructor(init) {
+      this._params = [];
+      if (init == null) return;
+      if (typeof init === 'string') {
+        const str = init.startsWith('?') ? init.slice(1) : init;
+        for (const pair of (str ? str.split('&') : [])) {
+          if (pair === '') continue;
+          const eq = pair.indexOf('=');
+          const key = eq >= 0 ? pair.slice(0, eq) : pair;
+          const value = eq >= 0 ? pair.slice(eq + 1) : '';
+          this._params.push([decodeFormPart(key), decodeFormPart(value)]);
+        }
+      } else if (typeof init[Symbol.iterator] === 'function') {
+        // [['a', '1'], ['b', '2']] and another URLSearchParams both arrive here.
+        for (const [key, value] of init) this._params.push([String(key), String(value)]);
+      } else if (typeof init === 'object') {
+        for (const [key, value] of Object.entries(init)) this._params.push([key, String(value)]);
+      }
+    }
+    get size() { return this._params.length; }
+    append(key, value) { this._params.push([String(key), String(value)]); }
+    set(key, value) {
+      const k = String(key), v = String(value);
+      const at = this._params.findIndex(([pk]) => pk === k);
+      if (at === -1) { this._params.push([k, v]); return; }
+      // Overwrite where the key already sat, so an edit does not reorder the query the server sent.
+      this._params[at] = [k, v];
+      this._params = this._params.filter(([pk], index) => pk !== k || index === at);
+    }
+    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
+    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }
+    has(key) { return this._params.some(([k]) => k === String(key)); }
+    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }
+    forEach(callback, thisArg) {
+      for (const [k, v] of [...this._params]) callback.call(thisArg, v, k, this);
+    }
+    keys() { return this._params.map(([k]) => k).values(); }
+    values() { return this._params.map(([, v]) => v).values(); }
+    entries() { return this._params.map(([k, v]) => [k, v]).values(); }
+    sort() { this._params.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)); }
+    [Symbol.iterator]() { return this.entries(); }
+    toString() {
+      return this._params
+        .map(([k, v]) => encodeFormPart(k) + '=' + encodeFormPart(v))
+        .join('&');
+    }
+  };
+  globalThis.URLSearchParams = URLSearchParams;
+`;export{e as URL_SEARCH_PARAMS_POLYFILL};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.d.ts

@@ -0,0 +1,3 @@
+/** `URL`: parses and resolves a url string, and exposes its parts. */
+export declare const URL_POLYFILL = "\n  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads\n  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name\n  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.\n  const normalizePath = (rawPath) => {\n    const path = rawPath.replace(/\\\\/g, '/');\n    const out = [];\n    for (const segment of path.split('/')) {\n      if (segment === '.') continue;\n      if (segment === '..') { if (out.length > 1) out.pop(); continue; }\n      out.push(segment);\n    }\n    let joined = out.join('/');\n    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';\n    return joined;\n  };\n\n  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };\n\n  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query\n  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a\n  // surrogate pair is encoded as the one character it stands for.\n  const encodeLiterals = (value) =>\n    value.replace(/[\\s\"<>\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {\n      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }\n    });\n\n  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox\n  // does not carry. The host re-parses the url before it fetches, so the request still goes to the\n  // punycoded name; only what guest code reads back differs.\n  const parseHostPort = (hostport, scheme) => {\n    let hostname = hostport;\n    let port = '';\n    if (hostport.startsWith('[')) {\n      const close = hostport.indexOf(']');\n      hostname = hostport.slice(0, close + 1);\n      const after = hostport.slice(close + 1);\n      if (after.startsWith(':')) port = after.slice(1);\n    } else {\n      const colon = hostport.lastIndexOf(':');\n      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }\n    }\n    if (port !== '' && !/^[0-9]+$/.test(port)) return null;\n    if (hostname === '') return null;\n    return {\n      hostname: hostname.toLowerCase(),\n      port: DEFAULT_PORTS[scheme] === port ? '' : port,\n      // A host written without a port leaves the port alone, rather than clearing it.\n      hasPort: port !== '',\n    };\n  };\n\n  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;\n\n  const parseAuthorityUrl = (scheme, rest) => {\n    const cut = rest.search(/[/\\\\?#]/);\n    const authority = cut === -1 ? rest : rest.slice(0, cut);\n    let tail = cut === -1 ? '' : rest.slice(cut);\n    let username = '';\n    let password = '';\n    let hostport = authority;\n    const at = authority.lastIndexOf('@');\n    if (at !== -1) {\n      const credentials = authority.slice(0, at);\n      hostport = authority.slice(at + 1);\n      const colon = credentials.indexOf(':');\n      username = colon === -1 ? credentials : credentials.slice(0, colon);\n      password = colon === -1 ? '' : credentials.slice(colon + 1);\n    }\n    const hostPort = parseHostPort(hostport, scheme);\n    if (!hostPort) return null;\n    let hash = '';\n    const hashAt = tail.indexOf('#');\n    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }\n    let search = '';\n    const queryAt = tail.indexOf('?');\n    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }\n    let pathname = tail === '' ? '/' : tail;\n    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;\n    return {\n      protocol: scheme,\n      username,\n      password,\n      hostname: hostPort.hostname,\n      port: hostPort.port,\n      pathname: encodeLiterals(normalizePath(pathname)),\n      search: encodeLiterals(search === '?' ? '' : search),\n      hash: encodeLiterals(hash === '#' ? '' : hash),\n    };\n  };\n\n  const parseUrl = (input, base) => {\n    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and\n    // a url copied out of a wrapped response body is the usual way one gets in here.\n    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');\n    const matched = ABSOLUTE_RE.exec(str);\n    // A scheme with no `//` (mailto:, data:) is not a fetch target, so it is not resolved.\n    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;\n    if (base === undefined) return null;\n    const resolved = parseUrl(base, undefined);\n    if (!resolved) return null;\n    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));\n    const parts = { ...resolved };\n    if (str.startsWith('#')) {\n      parts.hash = encodeLiterals(str === '#' ? '' : str);\n      return parts;\n    }\n    let rest = str;\n    let hash = '';\n    const hashAt = rest.indexOf('#');\n    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }\n    let search = '';\n    const queryAt = rest.indexOf('?');\n    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }\n    if (rest !== '') {\n      const absolute = /^[/\\\\]/.test(rest)\n        ? rest\n        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;\n      parts.pathname = encodeLiterals(normalizePath(absolute));\n    }\n    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).\n    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);\n    parts.hash = encodeLiterals(hash === '#' ? '' : hash);\n    return parts;\n  };\n\n  const URL = class URL {\n    constructor(input, base) {\n      const parsed = parseUrl(input, base === undefined ? undefined : String(base));\n      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));\n      this._parts = parsed;\n      this._params = undefined;\n      this._edited = false;\n    }\n    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart\n    // and putting it back together does not re-encode what the server sent.\n    _applyParams() {\n      if (this._edited && this._params) {\n        const query = this._params.toString();\n        this._parts.search = query ? '?' + query : '';\n        this._edited = false;\n      }\n    }\n    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing\n    // setter would swallow `url.host = \u2026` and fetch the address the caller meant to replace.\n    get protocol() { return this._parts.protocol; }\n    set protocol(value) {\n      const next = String(value).toLowerCase().replace(/:$/, '') + ':';\n      // Only a scheme that carries an authority can replace one, the way the host parser reads it.\n      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;\n    }\n    get username() { return this._parts.username; }\n    set username(value) { this._parts.username = String(value); }\n    get password() { return this._parts.password; }\n    set password(value) { this._parts.password = String(value); }\n    get hostname() { return this._parts.hostname; }\n    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }\n    get port() { return this._parts.port; }\n    set port(value) {\n      const port = String(value);\n      if (port !== '' && !/^[0-9]+$/.test(port)) return;\n      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;\n    }\n    get host() {\n      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;\n    }\n    set host(value) {\n      const parsed = parseHostPort(String(value), this._parts.protocol);\n      if (!parsed) return;\n      this._parts.hostname = parsed.hostname;\n      if (parsed.hasPort) this._parts.port = parsed.port;\n    }\n    get origin() { return this._parts.protocol + '//' + this.host; }\n    get pathname() { return this._parts.pathname; }\n    set pathname(value) {\n      const path = String(value);\n      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);\n    }\n    get search() {\n      this._applyParams();\n      return this._parts.search;\n    }\n    set search(value) {\n      const query = String(value);\n      const body = query.startsWith('?') ? query.slice(1) : query;\n      this._parts.search = body ? encodeLiterals('?' + body) : '';\n      this._params = undefined;\n      this._edited = false;\n    }\n    get searchParams() {\n      if (!this._params) {\n        const params = new URLSearchParams(this._parts.search);\n        const url = this;\n        // Every method that can change the parameters has to mark the query for re-serialization.\n        for (const method of ['append', 'set', 'delete', 'sort']) {\n          const original = params[method];\n          params[method] = function (...args) {\n            url._edited = true;\n            return original.apply(params, args);\n          };\n        }\n        this._params = params;\n      }\n      return this._params;\n    }\n    get hash() { return this._parts.hash; }\n    set hash(value) {\n      const fragment = String(value);\n      this._parts.hash = fragment === ''\n        ? ''\n        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);\n    }\n    get href() {\n      this._applyParams();\n      const credentials = this._parts.username\n        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'\n        : '';\n      return this._parts.protocol + '//' + credentials + this.host +\n        this._parts.pathname + this._parts.search + this._parts.hash;\n    }\n    set href(value) {\n      const parsed = parseUrl(value, undefined);\n      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));\n      this._parts = parsed;\n      this._params = undefined;\n      this._edited = false;\n    }\n    toString() { return this.href; }\n    toJSON() { return this.href; }\n    static canParse(input, base) {\n      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;\n    }\n    static parse(input, base) {\n      const parsed = parseUrl(input, base === undefined ? undefined : String(base));\n      return parsed ? new URL(input, base) : null;\n    }\n  };\n  globalThis.URL = URL;\n";
+//# sourceMappingURL=url.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.js

@@ -0,0 +1,239 @@
+const t=`
+  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads
+  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name
+  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.
+  const normalizePath = (rawPath) => {
+    const path = rawPath.replace(/\\\\/g, '/');
+    const out = [];
+    for (const segment of path.split('/')) {
+      if (segment === '.') continue;
+      if (segment === '..') { if (out.length > 1) out.pop(); continue; }
+      out.push(segment);
+    }
+    let joined = out.join('/');
+    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';
+    return joined;
+  };
+
+  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };
+
+  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query
+  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a
+  // surrogate pair is encoded as the one character it stands for.
+  const encodeLiterals = (value) =>
+    value.replace(/[\\s"<>\\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {
+      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }
+    });
+
+  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox
+  // does not carry. The host re-parses the url before it fetches, so the request still goes to the
+  // punycoded name; only what guest code reads back differs.
+  const parseHostPort = (hostport, scheme) => {
+    let hostname = hostport;
+    let port = '';
+    if (hostport.startsWith('[')) {
+      const close = hostport.indexOf(']');
+      hostname = hostport.slice(0, close + 1);
+      const after = hostport.slice(close + 1);
+      if (after.startsWith(':')) port = after.slice(1);
+    } else {
+      const colon = hostport.lastIndexOf(':');
+      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }
+    }
+    if (port !== '' && !/^[0-9]+$/.test(port)) return null;
+    if (hostname === '') return null;
+    return {
+      hostname: hostname.toLowerCase(),
+      port: DEFAULT_PORTS[scheme] === port ? '' : port,
+      // A host written without a port leaves the port alone, rather than clearing it.
+      hasPort: port !== '',
+    };
+  };
+
+  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;
+
+  const parseAuthorityUrl = (scheme, rest) => {
+    const cut = rest.search(/[/\\\\?#]/);
+    const authority = cut === -1 ? rest : rest.slice(0, cut);
+    let tail = cut === -1 ? '' : rest.slice(cut);
+    let username = '';
+    let password = '';
+    let hostport = authority;
+    const at = authority.lastIndexOf('@');
+    if (at !== -1) {
+      const credentials = authority.slice(0, at);
+      hostport = authority.slice(at + 1);
+      const colon = credentials.indexOf(':');
+      username = colon === -1 ? credentials : credentials.slice(0, colon);
+      password = colon === -1 ? '' : credentials.slice(colon + 1);
+    }
+    const hostPort = parseHostPort(hostport, scheme);
+    if (!hostPort) return null;
+    let hash = '';
+    const hashAt = tail.indexOf('#');
+    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }
+    let search = '';
+    const queryAt = tail.indexOf('?');
+    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }
+    let pathname = tail === '' ? '/' : tail;
+    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;
+    return {
+      protocol: scheme,
+      username,
+      password,
+      hostname: hostPort.hostname,
+      port: hostPort.port,
+      pathname: encodeLiterals(normalizePath(pathname)),
+      search: encodeLiterals(search === '?' ? '' : search),
+      hash: encodeLiterals(hash === '#' ? '' : hash),
+    };
+  };
+
+  const parseUrl = (input, base) => {
+    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and
+    // a url copied out of a wrapped response body is the usual way one gets in here.
+    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');
+    const matched = ABSOLUTE_RE.exec(str);
+    // A scheme with no \`//\` (mailto:, data:) is not a fetch target, so it is not resolved.
+    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;
+    if (base === undefined) return null;
+    const resolved = parseUrl(base, undefined);
+    if (!resolved) return null;
+    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));
+    const parts = { ...resolved };
+    if (str.startsWith('#')) {
+      parts.hash = encodeLiterals(str === '#' ? '' : str);
+      return parts;
+    }
+    let rest = str;
+    let hash = '';
+    const hashAt = rest.indexOf('#');
+    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }
+    let search = '';
+    const queryAt = rest.indexOf('?');
+    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }
+    if (rest !== '') {
+      const absolute = /^[/\\\\]/.test(rest)
+        ? rest
+        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;
+      parts.pathname = encodeLiterals(normalizePath(absolute));
+    }
+    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).
+    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);
+    parts.hash = encodeLiterals(hash === '#' ? '' : hash);
+    return parts;
+  };
+
+  const URL = class URL {
+    constructor(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart
+    // and putting it back together does not re-encode what the server sent.
+    _applyParams() {
+      if (this._edited && this._params) {
+        const query = this._params.toString();
+        this._parts.search = query ? '?' + query : '';
+        this._edited = false;
+      }
+    }
+    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing
+    // setter would swallow \`url.host = \u2026\` and fetch the address the caller meant to replace.
+    get protocol() { return this._parts.protocol; }
+    set protocol(value) {
+      const next = String(value).toLowerCase().replace(/:$/, '') + ':';
+      // Only a scheme that carries an authority can replace one, the way the host parser reads it.
+      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;
+    }
+    get username() { return this._parts.username; }
+    set username(value) { this._parts.username = String(value); }
+    get password() { return this._parts.password; }
+    set password(value) { this._parts.password = String(value); }
+    get hostname() { return this._parts.hostname; }
+    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }
+    get port() { return this._parts.port; }
+    set port(value) {
+      const port = String(value);
+      if (port !== '' && !/^[0-9]+$/.test(port)) return;
+      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;
+    }
+    get host() {
+      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;
+    }
+    set host(value) {
+      const parsed = parseHostPort(String(value), this._parts.protocol);
+      if (!parsed) return;
+      this._parts.hostname = parsed.hostname;
+      if (parsed.hasPort) this._parts.port = parsed.port;
+    }
+    get origin() { return this._parts.protocol + '//' + this.host; }
+    get pathname() { return this._parts.pathname; }
+    set pathname(value) {
+      const path = String(value);
+      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);
+    }
+    get search() {
+      this._applyParams();
+      return this._parts.search;
+    }
+    set search(value) {
+      const query = String(value);
+      const body = query.startsWith('?') ? query.slice(1) : query;
+      this._parts.search = body ? encodeLiterals('?' + body) : '';
+      this._params = undefined;
+      this._edited = false;
+    }
+    get searchParams() {
+      if (!this._params) {
+        const params = new URLSearchParams(this._parts.search);
+        const url = this;
+        // Every method that can change the parameters has to mark the query for re-serialization.
+        for (const method of ['append', 'set', 'delete', 'sort']) {
+          const original = params[method];
+          params[method] = function (...args) {
+            url._edited = true;
+            return original.apply(params, args);
+          };
+        }
+        this._params = params;
+      }
+      return this._params;
+    }
+    get hash() { return this._parts.hash; }
+    set hash(value) {
+      const fragment = String(value);
+      this._parts.hash = fragment === ''
+        ? ''
+        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);
+    }
+    get href() {
+      this._applyParams();
+      const credentials = this._parts.username
+        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'
+        : '';
+      return this._parts.protocol + '//' + credentials + this.host +
+        this._parts.pathname + this._parts.search + this._parts.hash;
+    }
+    set href(value) {
+      const parsed = parseUrl(value, undefined);
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    toString() { return this.href; }
+    toJSON() { return this.href; }
+    static canParse(input, base) {
+      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;
+    }
+    static parse(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      return parsed ? new URL(input, base) : null;
+    }
+  };
+  globalThis.URL = URL;
+`;export{t as URL_POLYFILL};

package/dist/server/plugins/mcp/gateway-mcp/elicitation.js

@@ -1,3 +1,3 @@
-import{inputRequired as s,inputResponse as p}from"@modelcontextprotocol/server";import{MANAGE_API_CREDENTIALS_TOOL_NAME as m}from"../constants.js";import{secretStore as T,ELICITATION_TTL_MS as f}from"./secret-store.js";import{ANONYMOUS_SUBJECT_PREFIX as l}from"./subject.js";const c="credentials";function C(e){const t=p(e,c);return t.kind==="elicit"&&(t.action==="decline"||t.action==="cancel")}function _(e){return{api:e.api,name:e.name}}async function y(e){const{url:t}=await d(e);return s({inputRequests:{[c]:s.elicitUrl({message:A(e.target.name,e.hasExistingSecret),url:t})}})}async function b(e){const{url:t}=await d(e);return I(e,t,$(e.subject))}function O(e){return[e.status===401?`The stored credentials for "${e.name}" were rejected (HTTP 401).`:`The "${e.name}" API rejected the request with HTTP ${e.status}.`,"",`Do not retry the same call. Call \`${m}\` with api: "${e.api}" to get a link where the user can replace or remove the stored credentials, then retry once they confirm.`].join(`
-`)}async function d({kv:e,subject:t,baseUrl:n,target:i,auth:a,hasExistingSecret:o}){const r=await T.createElicitation(e,{subject:t,api:i.api,name:i.name,auth:a,hasExistingSecret:o});return{token:r,url:E(n,r)}}function $(e){return e.startsWith(l)?e.slice(l.length):void 0}function A(e,t){return t?`Open the link to replace or remove the stored credentials for the "${e}" API. They never pass through the chat.`:`The "${e}" API needs credentials. Open the link to add them. They never pass through the chat.`}function E(e,t){if(!e)return`/mcp/credentials?token=${t}`;try{const n=new URL("/mcp/credentials",e);return n.searchParams.set("token",t),n.toString()}catch{return`${e}/mcp/credentials?token=${t}`}}function I({target:e,reason:t,hasExistingSecret:n},i,a){const o=[t.kind==="authFailure"?`The upstream API "${e.name}" returned ${t.status} and needs credentials.`:n?`Credentials are already stored for the "${e.name}" API; the link below lets the user replace or remove them.`:`The "${e.name}" API needs credentials.`,"",`**Action required: show the user the link below and ask them to open it in a browser (valid ${Math.round(f/6e4)} minutes):**`,"",i,"",a?`Then call this tool again with sessionHandle: "${a}" - the credentials are stored against that handle, applied server-side, and never appear in the conversation.`:"Then call this tool again - the credentials are applied server-side and never appear in the conversation."],r=t.kind==="authFailure"?t.otherApiNames??[]:[];if(r.length>0){const h=r.map(u=>`"${u}"`).join(", ");o.push("",`The remaining APIs (${h}) will prompt for credentials on subsequent calls.`)}return o.join(`
-`)}export{c as CREDENTIALS_INPUT_REQUEST_KEY,O as buildCredentialsToolHint,b as buildUpstreamCredentialFallback,y as buildUpstreamCredentialInputRequired,C as isCredentialElicitationDeclined,_ as targetOf};
+import{inputRequired as c,inputResponse as f}from"@modelcontextprotocol/server";import{MANAGE_API_CREDENTIALS_TOOL_NAME as T}from"../constants.js";import{secretStore as $,ELICITATION_TTL_MS as A}from"./secret-store.js";import{ANONYMOUS_SUBJECT_PREFIX as l}from"./subject.js";const h="credentials";function C(e){const t=f(e,h);return t.kind==="elicit"&&(t.action==="decline"||t.action==="cancel")}function _(e){return{api:e.api,name:e.name}}async function b(e){const{url:t}=await d(e);return c({inputRequests:{[h]:c.elicitUrl({message:P(e.target.name,e.hasExistingSecret),url:t})}})}async function O(e){const{url:t}=await d(e);return y(e,t,I(e.subject))}function R(e){return[e.status===401?`The stored credentials for "${e.name}" were rejected (HTTP 401).`:`The "${e.name}" API rejected the request with HTTP ${e.status}.`,"",`Do not retry the same call. Call \`${T}\` with api: "${e.api}" to get a link the user has to open in a browser to replace or remove the stored credentials, then retry once they confirm they saved them.`].join(`
+`)}async function d({kv:e,subject:t,baseUrl:n,target:i,auth:a,hasExistingSecret:o}){const r=await $.createElicitation(e,{subject:t,api:i.api,name:i.name,auth:a,hasExistingSecret:o});return{token:r,url:g(n,r)}}function I(e){return e.startsWith(l)?e.slice(l.length):void 0}function P(e,t){const n=`The link works for ${u()} minutes.`;return t?`Open this page in a browser to replace or remove the stored credentials for the "${e}" API. They go straight to the API and never enter the chat. ${n}`:`The "${e}" API needs credentials. Open this page in a browser to paste them - they go straight to the API and never enter the chat. ${n}`}function u(){return Math.round(A/6e4)}function g(e,t){if(!e)return`/mcp/credentials?token=${t}`;try{const n=new URL("/mcp/credentials",e);return n.searchParams.set("token",t),n.toString()}catch{return`${e}/mcp/credentials?token=${t}`}}function y({target:e,reason:t,hasExistingSecret:n},i,a){const r=[`**Stop and show the user this link. They have to open it in a browser to ${n?`replace or remove the stored credentials for the "${e.name}" API`:`add credentials for the "${e.name}" API`} - nothing continues until they do.**`,"",i,"",`The link is valid ${u()} minutes and opens a form on this site. Credentials go straight to the API from there: never ask for them in the conversation and never pass them as a tool argument.`,"",t.kind==="authFailure"?`The upstream API "${e.name}" returned ${t.status} and needs credentials.`:n?`Credentials are already stored for the "${e.name}" API; the link lets the user replace or remove them.`:`The "${e.name}" API needs credentials.`,a?`Once the user confirms they saved them, call this tool again with sessionHandle: "${a}" - the credentials are stored against that handle, applied server-side, and never appear in the conversation.`:"Once the user confirms they saved them, call this tool again - the credentials are applied server-side and never appear in the conversation."],s=t.kind==="authFailure"?t.otherApiNames??[]:[];if(s.length>0){const p=s.map(m=>`"${m}"`).join(", ");r.push("",`The remaining APIs (${p}) will prompt for credentials on subsequent calls.`)}return r.join(`
+`)}export{h as CREDENTIALS_INPUT_REQUEST_KEY,R as buildCredentialsToolHint,O as buildUpstreamCredentialFallback,b as buildUpstreamCredentialInputRequired,C as isCredentialElicitationDeclined,_ as targetOf};

package/dist/server/plugins/mcp/handlers/mcp-credentials-handler.js

@@ -1,4 +1,4 @@
-import{secretStore as s}from"../gateway-mcp/secret-store.js";import{buildAllowedHostMatchers as C}from"../gateway-mcp/fetch/allowed-hosts.js";import{assertUrlAllowed as P}from"../gateway-mcp/fetch/ssrf-guard.js";import{readCappedBody as I,getDefaultAgent as E}from"../gateway-mcp/fetch/fetch-bridge.js";const p={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'"},_=3e4,T=64*1024;let k=fetch;function Y(e){k=e}const R=async(e,t)=>{const n=await t.getKv();if(e.method==="GET"){const o=new URL(e.url).searchParams.get("token")??"",r=await s.peekElicitation(n,o);return r?new Response(q(r,o),{status:200,headers:p}):u()}if(e.method==="POST"){const o=await e.formData(),r=String(o.get("token")??""),m=String(o.get("mode")??"token");return m==="client-credentials"?O(n,o,r):m==="clear"?F(n,r):z(n,o,r)}return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, POST"}})};async function z(e,t,n){const o=String(t.get("secret")??"");if(!o)return u();const r=await s.consumeElicitation(e,n);return r?(await s.setSecret(e,r.subject,r.api,B(r.auth,o)),new Response(x(r.name),{status:200,headers:p})):u()}async function F(e,t){const n=await s.consumeElicitation(e,t);return n?(await s.deleteSecret(e,n.subject,n.api),new Response(D(n.name),{status:200,headers:p})):u()}async function O(e,t,n){const o=String(t.get("client_id")??"").trim(),r=String(t.get("client_secret")??"").trim();if(!o||!r)return u();const m=await s.peekElicitation(e,n);if(!m||m.auth.kind!=="oauth2ClientCredentials")return u();const i=await s.consumeElicitation(e,n);if(!i||i.auth.kind!=="oauth2ClientCredentials")return u();const b=i.auth;try{const A=C([{url:b.tokenUrl}]),$=P(b.tokenUrl,A),v=new AbortController,S=setTimeout(()=>v.abort(),_);let y;try{y=await k($,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials",client_id:o,client_secret:r,...b.scopes.length>0?{scope:b.scopes.join(" ")}:{}}),redirect:"manual",signal:v.signal,dispatcher:E()})}finally{clearTimeout(S)}if(!y.ok)return f(i.name);let w;try{w=await I(y,T)}catch{return f(i.name)}let h;try{h=JSON.parse(w)}catch{return f(i.name)}const g=typeof h=="object"&&h!==null&&"access_token"in h?h.access_token:void 0;return typeof g!="string"||!g?f(i.name):(await s.setSecret(e,i.subject,i.api,{header:"Authorization",value:`Bearer ${g}`}),new Response(x(i.name),{status:200,headers:p}))}catch{return f(i.name)}}function B(e,t){return e.kind==="apiKey"?{header:e.header,value:t}:e.kind==="bearer"||e.kind==="oauth2ClientCredentials"?{header:"Authorization",value:j(t)}:{header:"Authorization",value:t}}function j(e){const t=e.trim();return t.toLowerCase().startsWith("bearer")?t:`Bearer ${t}`}function a(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function c(e){return`<!doctype html>
+import{secretStore as s,ELICITATION_TTL_MS as x}from"../gateway-mcp/secret-store.js";import{buildAllowedHostMatchers as P}from"../gateway-mcp/fetch/allowed-hosts.js";import{assertUrlAllowed as _}from"../gateway-mcp/fetch/ssrf-guard.js";import{readCappedBody as E,getDefaultAgent as T}from"../gateway-mcp/fetch/fetch-bridge.js";const p={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; form-action 'self'"},R=3e4,z=64*1024;let $=fetch;function Q(e){$=e}const F=async(e,t)=>{const n=await t.getKv();if(e.method==="GET"){const o=new URL(e.url).searchParams.get("token")??"",r=await s.peekElicitation(n,o);return r?new Response(j(r,o),{status:200,headers:p}):u()}if(e.method==="POST"){const o=await e.formData(),r=String(o.get("token")??""),m=String(o.get("mode")??"token");return m==="client-credentials"?M(n,o,r):m==="clear"?B(n,r):O(n,o,r)}return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, POST"}})};async function O(e,t,n){const o=String(t.get("secret")??"");if(!o)return u();const r=await s.consumeElicitation(e,n);return r?(await s.setSecret(e,r.subject,r.api,H(r.auth,o)),new Response(A(r.name),{status:200,headers:p})):u()}async function B(e,t){const n=await s.consumeElicitation(e,t);return n?(await s.deleteSecret(e,n.subject,n.api),new Response(D(n.name),{status:200,headers:p})):u()}async function M(e,t,n){const o=String(t.get("client_id")??"").trim(),r=String(t.get("client_secret")??"").trim();if(!o||!r)return u();const m=await s.peekElicitation(e,n);if(!m||m.auth.kind!=="oauth2ClientCredentials")return u();const i=await s.consumeElicitation(e,n);if(!i||i.auth.kind!=="oauth2ClientCredentials")return u();const b=i.auth;try{const S=P([{url:b.tokenUrl}]),C=_(b.tokenUrl,S),k=new AbortController,I=setTimeout(()=>k.abort(),R);let g;try{g=await $(C,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"client_credentials",client_id:o,client_secret:r,...b.scopes.length>0?{scope:b.scopes.join(" ")}:{}}),redirect:"manual",signal:k.signal,dispatcher:T()})}finally{clearTimeout(I)}if(!g.ok)return f(i.name);let v;try{v=await E(g,z)}catch{return f(i.name)}let h;try{h=JSON.parse(v)}catch{return f(i.name)}const w=typeof h=="object"&&h!==null&&"access_token"in h?h.access_token:void 0;return typeof w!="string"||!w?f(i.name):(await s.setSecret(e,i.subject,i.api,{header:"Authorization",value:`Bearer ${w}`}),new Response(A(i.name),{status:200,headers:p}))}catch{return f(i.name)}}function H(e,t){return e.kind==="apiKey"?{header:e.header,value:t}:e.kind==="bearer"||e.kind==="oauth2ClientCredentials"?{header:"Authorization",value:N(t)}:{header:"Authorization",value:t}}function N(e){const t=e.trim();return t.toLowerCase().startsWith("bearer")?t:`Bearer ${t}`}function a(e){return e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function c(e){return`<!doctype html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
@@ -37,7 +37,7 @@ footer{border-top-color:#1f2937;color:#6b7280}
 </style>
 </head>
 <body><div class="card">${e}</div></body>
-</html>`}function d(e){return`<h1>\u{1F512} ${a(e)}</h1>`}function l(){return"<footer>Secured by Redocly &middot; credentials never enter the AI conversation</footer>"}function q(e,t){const n=e.hasExistingSecret?H(t):"";switch(e.auth.kind){case"bearer":return N(e.name,t,n);case"apiKey":return U(e.name,t,e.auth.header,n);case"oauth2ClientCredentials":return K(e.name,t,e.auth.scopes,n);default:return M(e.name,t,n)}}function H(e){return`
+</html>`}function d(e){return`<h1>\u{1F512} ${a(e)}</h1>`}function l(){return"<footer>Secured by Redocly &middot; credentials never enter the AI conversation</footer>"}function y(){return`<p class="hint">This link expires ${Math.round(x/6e4)} minutes after it was issued. If it stops working, ask your AI client for a new one.</p>`}function j(e,t){const n=e.hasExistingSecret?q(t):"";switch(e.auth.kind){case"bearer":return L(e.name,t,n);case"apiKey":return U(e.name,t,e.auth.header,n);case"oauth2ClientCredentials":return G(e.name,t,e.auth.scopes,n);default:return K(e.name,t,n)}}function q(e){return`
 <div class="section">
 <h2>Remove stored credentials</h2>
 <p class="hint">This API already has credentials stored. Save above to replace them, or remove them to make calls anonymous again.</p>
@@ -46,7 +46,7 @@ footer{border-top-color:#1f2937;color:#6b7280}
 <input type="hidden" name="mode" value="clear">
 <button class="danger" type="submit">Remove credentials</button>
 </form>
-</div>`}function N(e,t,n){return c(`
+</div>`}function L(e,t,n){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
 <form method="post" action="/mcp/credentials" autocomplete="off">
@@ -58,6 +58,7 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${n}
+${y()}
 ${l()}`)}function U(e,t,n,o){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and sent to the API as the <code>${a(n)}</code> header. It never passes through the AI conversation.</p>
@@ -69,7 +70,8 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${o}
-${l()}`)}function K(e,t,n,o){const r=n.length>0?n.map(a).join(", "):"default scopes";return c(`
+${y()}
+${l()}`)}function G(e,t,n,o){const r=n.length>0?n.map(a).join(", "):"default scopes";return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">Paste a token you already have, or let us exchange client credentials for one via OAuth2 client_credentials.</p>
 <div class="section">
@@ -97,7 +99,8 @@ ${d(`Credentials for ${e}`)}
 </form>
 </div>
 ${o}
-${l()}`)}function M(e,t,n){return c(`
+${y()}
+${l()}`)}function K(e,t,n){return c(`
 ${d(`Credentials for ${e}`)}
 <p class="hint">The value is stored encrypted for you only (24 hours for anonymous callers, 30 days when signed in) and is sent to the API as the <code>Authorization</code> header. It never passes through the AI conversation.</p>
 <form method="post" action="/mcp/credentials" autocomplete="off">
@@ -108,13 +111,14 @@ ${d(`Credentials for ${e}`)}
 <button type="submit">Save credentials</button>
 </form>
 ${n}
+${y()}
 ${l()}`)}function D(e){return c(`
 ${d("Credentials removed")}
 <p>The stored credentials for ${a(e)} are gone. Calls to that API are anonymous again until you add new ones.</p>
-${l()}`)}function x(e){return c(`
+${l()}`)}function A(e){return c(`
 ${d("Credentials saved")}
-<p>Credentials for ${a(e)} are set for this session. Return to your AI client and continue - confirm the elicitation prompt if it is still open.</p>
+<p>Credentials for ${a(e)} are saved. Go back to your AI client and ask it to retry - or confirm the prompt it left open, if there is one. You can close this tab.</p>
 ${l()}`)}function f(e){return new Response(c(`
 ${d("Exchange failed")}
 <p>We could not exchange your client credentials for a token for ${a(e)}. This link has been used up - go back to your AI client and request a new link, then try again.</p>
-${l()}`),{status:502,headers:p})}function u(){return new Response(c(`${d("Link expired")}<p>This credentials link is invalid or has expired. Retry the request in your AI client to get a fresh link.</p>${l()}`),{status:404,headers:p})}var J=R;export{J as default,Y as setCredentialsFetchImpl};
+${l()}`),{status:502,headers:p})}function u(){return new Response(c(`${d("Link expired")}<p>This credentials link is invalid, already used, or older than ${Math.round(x/6e4)} minutes. Retry the request in your AI client to get a fresh link.</p>${l()}`),{status:404,headers:p})}var V=F;export{V as default,Q as setCredentialsFetchImpl};

package/dist/server/plugins/mcp/servers/mcp-server.d.ts

@@ -14,6 +14,7 @@ export declare function connectMcpServer(server: McpServer, transport: WebStanda
 export type ToolDispatchDeps = {
     getClientCapabilities: () => {
         elicitation?: {
+            form?: unknown;
             url?: unknown;
         };
     } | undefined;

package/dist/server/plugins/mcp/servers/mcp-server.js

@@ -1,3 +1,3 @@
-import{McpServer as T,WebStandardStreamableHTTPServerTransport as q}from"@modelcontextprotocol/server";import{logger as b}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as v,MCP_TOOL_WORKER_KEY as I}from"../../../workers/mcp-tool-worker-pool.js";import{SSE_KEEPALIVE_INTERVAL_MS as R}from"../constants.js";import{secretStore as _}from"../gateway-mcp/secret-store.js";import{readAuthRequiredMeta as A,stripAuthRequiredMeta as h}from"../gateway-mcp/upstream-auth.js";import{buildCredentialsToolHint as O,buildUpstreamCredentialFallback as w,buildUpstreamCredentialInputRequired as U,isCredentialElicitationDeclined as D,targetOf as C}from"../gateway-mcp/elicitation.js";import{resolveUpstreamAuthScheme as K}from"../gateway-mcp/upstream-auth-scheme.js";import{MISSING_SESSION_HANDLE_MESSAGE as P,resolveSecretSubject as j}from"../gateway-mcp/subject.js";const L=6e4,g=new Map;function x(e,t){const r=g.get(e);if(r)return r;const n=t().finally(()=>{g.delete(e)});return g.set(e,n),n}function z(e,t){const r=new T({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...t?{instructions:t}:{}}),n=new q({keepAliveMs:R,sessionIdGenerator:void 0});return{server:r,transport:n}}async function ee(e,t){return await e.connect(t),{server:e,transport:t,cleanup:async()=>{t.close()}}}function te(e,t){return r=>async(n,a)=>{b.info(`MCP tool called: ${r}`);const i=e.elicitationEnabled??!1,u=a.mcpReq.envelope!==void 0,o=i?j(e.user,n.sessionHandle):{kind:"anonymous"},s=o.kind==="resolved"?o.subject:void 0;if(o.kind==="invalid")return{content:[{type:"text",text:o.message}],isError:!0};const d=async()=>{if(!(!i||!s||!t?.getKv))try{const c=await t.getKv();return await _.getSecretsForSubject(c,s)}catch(c){b.warn(`gateway mcp secret store error, continuing unauthenticated: ${String(c)}`);return}};let m;const S=async()=>{m=await d();const c={toolName:r,args:n,context:{...e,upstreamSecrets:m},extra:$(a)};return await v.exec(I,[c],{timeout:L})};let p=await S();const l=A(p);if(l.length>0&&i&&!s)return h({...p,content:[{type:"text",text:P}],isError:!0});if(l.length>0&&i&&s&&t?.getKv){const c=await t.getKv(),E=new Set(Object.keys(m??{})),f=u?await H(e,a,l,s,c,E,t):await N(e,l,s,c,E);switch(f.kind){case"inputRequired":return f.result;case"retry":p=await S();break;case"appendText":p={...p,content:[...p.content,{type:"text",text:f.text}]};break;case"none":break}}return h(p)}}function F(e){return!!e?.getClientCapabilities()?.elicitation?.url}function k(e,t){return e.status===401&&!t.has(e.api)}function y(e){return e.map(O).join(`
+import{McpServer as T,WebStandardStreamableHTTPServerTransport as q}from"@modelcontextprotocol/server";import{logger as g}from"../../../tools/notifiers/logger.js";import{mcpToolWorkers as v,MCP_TOOL_WORKER_KEY as I}from"../../../workers/mcp-tool-worker-pool.js";import{SSE_KEEPALIVE_INTERVAL_MS as R}from"../constants.js";import{secretStore as _}from"../gateway-mcp/secret-store.js";import{readAuthRequiredMeta as A,stripAuthRequiredMeta as h}from"../gateway-mcp/upstream-auth.js";import{buildCredentialsToolHint as O,buildUpstreamCredentialFallback as w,buildUpstreamCredentialInputRequired as U,isCredentialElicitationDeclined as C,targetOf as D}from"../gateway-mcp/elicitation.js";import{resolveUpstreamAuthScheme as j}from"../gateway-mcp/upstream-auth-scheme.js";import{MISSING_SESSION_HANDLE_MESSAGE as K,resolveSecretSubject as P}from"../gateway-mcp/subject.js";const L=6e4,S=new Map;function $(e,t){const r=S.get(e);if(r)return r;const n=t().finally(()=>{S.delete(e)});return S.set(e,n),n}function ee(e,t){const r=new T({name:e,version:new Date().toISOString().slice(0,10)},{capabilities:{logging:{}},...t?{instructions:t}:{}}),n=new q({keepAliveMs:R,sessionIdGenerator:void 0});return{server:r,transport:n}}async function te(e,t){return await e.connect(t),{server:e,transport:t,cleanup:async()=>{t.close()}}}function re(e,t){return r=>async(n,a)=>{g.info(`MCP tool called: ${r}`);const i=e.elicitationEnabled??!1,s=a.mcpReq.envelope!==void 0,c=i?P(e.user,n.sessionHandle):{kind:"anonymous"},o=c.kind==="resolved"?c.subject:void 0;if(c.kind==="invalid")return{content:[{type:"text",text:c.message}],isError:!0};const d=async()=>{if(!(!i||!o||!t?.getKv))try{const u=await t.getKv();return await _.getSecretsForSubject(u,o)}catch(u){g.warn(`gateway mcp secret store error, continuing unauthenticated: ${String(u)}`);return}};let m;const E=async()=>{m=await d();const u={toolName:r,args:n,context:{...e,upstreamSecrets:m},extra:N(a)};return await v.exec(I,[u],{timeout:L})};let p=await E();const l=A(p);if(l.length>0&&i&&!o)return h({...p,content:[{type:"text",text:K}],isError:!0});if(l.length>0&&i&&o&&t?.getKv){g.info(`gateway mcp credentials prompt: era=${s?"2026-07-28":"2025"} clientElicitation=${F(t)}`);const u=await t.getKv(),b=new Set(Object.keys(m??{})),f=s?await H(e,a,l,o,u,b,t):await B(e,l,o,u,b);switch(f.kind){case"inputRequired":return f.result;case"retry":p=await E();break;case"prependText":p={...p,content:[{type:"text",text:f.text},...p.content],isError:!0};break;case"none":break}}return h(p)}}function x(e){return!!e?.getClientCapabilities()?.elicitation?.url}function F(e){const t=e?.getClientCapabilities()?.elicitation;if(!t)return"none";const r=[t.form?"form":void 0,t.url?"url":void 0].filter(Boolean);return r.length>0?r.join("+"):"none"}function k(e,t){return e.status===401&&!t.has(e.api)}function y(e){return e.map(O).join(`
 
-`)}async function M(e,t,r,n){const[a,...i]=t;return{subject:r,baseUrl:e.baseUrl??"",target:C(a),auth:await K(e,a.api),kv:n,hasExistingSecret:!1,reason:{kind:"authFailure",status:a.status,otherApiNames:i.map(u=>u.name)}}}async function H(e,t,r,n,a,i,u){if(D(t.mcpReq.inputResponses))return{kind:"none"};const o=r.filter(d=>k(d,i));if(o.length===0)return{kind:"appendText",text:y(r)};const s=await M(e,o,n,a);return F(u)?{kind:"inputRequired",result:await U(s)}:{kind:"appendText",text:await w(s)}}async function N(e,t,r,n,a){const i=t.filter(s=>k(s,a));if(i.length===0)return{kind:"appendText",text:y(t)};const u=await M(e,i,r,n);return{kind:"appendText",text:await x(`${r}:${i[0].api}`,()=>w(u))}}function $(e){return{sessionId:e.sessionId,authInfo:e.http?.authInfo,requestId:e.mcpReq.id,_meta:e.mcpReq._meta}}function re(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization,mcpMode:e.mcpMode,elicitationEnabled:e.elicitationEnabled,gatewayFetchBudgetPerExec:e.gatewayFetchBudgetPerExec,clientIp:e.clientIp,upstreamSecrets:e.upstreamSecrets}}export{ee as connectMcpServer,z as createMcpServer,te as createToolDispatch,re as extractSerializableContext};
+`)}async function M(e,t,r,n){const[a,...i]=t;return{subject:r,baseUrl:e.baseUrl??"",target:D(a),auth:await j(e,a.api),kv:n,hasExistingSecret:!1,reason:{kind:"authFailure",status:a.status,otherApiNames:i.map(s=>s.name)}}}async function H(e,t,r,n,a,i,s){if(C(t.mcpReq.inputResponses))return{kind:"none"};const c=r.filter(d=>k(d,i));if(c.length===0)return{kind:"prependText",text:y(r)};const o=await M(e,c,n,a);return x(s)?{kind:"inputRequired",result:await U(o)}:{kind:"prependText",text:await w(o)}}async function B(e,t,r,n,a){const i=t.filter(o=>k(o,a));if(i.length===0)return{kind:"prependText",text:y(t)};const s=await M(e,i,r,n);return{kind:"prependText",text:await $(`${r}:${i[0].api}`,()=>w(s))}}function N(e){return{sessionId:e.sessionId,authInfo:e.http?.authInfo,requestId:e.mcpReq.id,_meta:e.mcpReq._meta}}function ne(e){return{user:e.user,config:e.config,outdir:e.outdir,baseUrl:e.baseUrl,params:e.params,query:e.query,cookies:e.cookies,apiDescriptionsMap:e.apiDescriptionsMap,graphqlDescriptions:e.graphqlDescriptions,products:e.products,accessToken:e.accessToken,metadata:e.metadata,upstreamAuthorization:e.upstreamAuthorization,mcpMode:e.mcpMode,elicitationEnabled:e.elicitationEnabled,gatewayFetchBudgetPerExec:e.gatewayFetchBudgetPerExec,clientIp:e.clientIp,upstreamSecrets:e.upstreamSecrets}}export{te as connectMcpServer,ee as createMcpServer,re as createToolDispatch,ne as extractSerializableContext};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redocly/realm",
-  "version": "0.136.0-next.14",
+  "version": "0.136.0-next.15",
   "description": "",
   "type": "module",
   "bin": {
@@ -53,7 +53,7 @@
     "escape-carriage": "^1.3.1",
     "fflate": "0.7.4",
     "flexsearch": "0.7.43",
-    "graphql": "16.12.0",
+    "graphql": "16.14.2",
     "hono": "4.13.1",
     "htmlparser2": "8.0.2",
     "i18next": "22.4.15",
@@ -93,15 +93,15 @@
     "xpath": "0.0.34",
     "yaml-ast-parser": "0.0.43",
     "zod": "^3.25.76",
-    "@redocly/api-docs": "0.1.0-next.6",
-    "@redocly/asyncapi-docs": "1.13.0-next.12",
+    "@redocly/api-docs": "0.1.0-next.7",
+    "@redocly/asyncapi-docs": "1.13.0-next.13",
     "@redocly/config": "0.53.1",
-    "@redocly/graphql-docs": "1.13.0-next.12",
-    "@redocly/openapi-docs": "3.24.0-next.12",
+    "@redocly/graphql-docs": "1.13.0-next.13",
+    "@redocly/openapi-docs": "3.24.0-next.13",
     "@redocly/portal-legacy-ui": "0.19.0-next.0",
-    "@redocly/portal-plugin-mock-server": "0.21.0-next.12",
+    "@redocly/portal-plugin-mock-server": "0.21.0-next.13",
     "@redocly/realm-asyncapi-sdk": "0.14.0-next.4",
-    "@redocly/theme": "0.68.0-next.8"
+    "@redocly/theme": "0.68.0-next.9"
   },
   "peerDependencies": {
     "react": "^19.2.7",

package/dist/server/plugins/mcp/codemode/sandbox/polyfills.d.ts

@@ -1,2 +0,0 @@
-export declare const SANDBOX_FETCH_SETUP = "\n  const URLSearchParams = class URLSearchParams {\n    constructor(init) {\n      this._params = [];\n      if (typeof init === 'string') {\n        const str = init.startsWith('?') ? init.slice(1) : init;\n        for (const pair of (str ? str.split('&') : [])) {\n          const eq = pair.indexOf('=');\n          const k = eq >= 0 ? pair.slice(0, eq) : pair;\n          const v = eq >= 0 ? pair.slice(eq + 1) : '';\n          if (k) this._params.push([decodeURIComponent(k), decodeURIComponent(v)]);\n        }\n      } else if (init != null && typeof init === 'object') {\n        for (const [k, v] of Object.entries(init)) this._params.push([k, String(v)]);\n      }\n    }\n    append(key, value) { this._params.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      this._params = this._params.filter(([pk]) => pk !== k);\n      this._params.push([k, v]);\n    }\n    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }\n    has(key) { return this._params.some(([k]) => k === String(key)); }\n    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }\n    entries() { return this._params.values(); }\n    [Symbol.iterator]() { return this._params.values(); }\n    toString() {\n      return this._params\n        .map(([k, v]) => encodeURIComponent(k) + '=' + encodeURIComponent(v))\n        .join('&');\n    }\n  };\n  globalThis.URLSearchParams = URLSearchParams;\n\n  const FormData = class FormData {\n    constructor() { this._fields = []; }\n    append(key, value) { this._fields.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      this._fields = this._fields.filter(([fk]) => fk !== k);\n      this._fields.push([k, v]);\n    }\n    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    has(key) { return this._fields.some(([k]) => k === String(key)); }\n    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }\n    entries() { return this._fields.values(); }\n    [Symbol.iterator]() { return this._fields.values(); }\n  };\n  globalThis.FormData = FormData;\n\n  const hostFetch = globalThis.__fetchBridge.fetch;\n  delete globalThis.__fetchBridge;\n  globalThis.fetch = (url, init = {}) => {\n    let body;\n    let autoContentType;\n    if (init.body instanceof URLSearchParams) {\n      body = init.body.toString();\n      autoContentType = 'application/x-www-form-urlencoded';\n    } else if (init.body instanceof FormData) {\n      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);\n      body = init.body._fields\n        .map(([k, v]) =>\n          '--' + boundary + '\\r\\nContent-Disposition: form-data; name=\"' + k + '\"\\r\\n\\r\\n' + v,\n        )\n        .join('\\r\\n') + '\\r\\n--' + boundary + '--';\n      autoContentType = 'multipart/form-data; boundary=' + boundary;\n    } else if (init.body != null && typeof init.body !== 'string') {\n      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');\n    } else {\n      body = init.body ?? undefined;\n    }\n    const callerHeaders = init.headers;\n    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(\n      (k) => k.toLowerCase() === 'content-type',\n    );\n    const headers = autoContentType && !hasContentType\n      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)\n      : callerHeaders;\n    return hostFetch({ url: String(url), method: init.method, headers, body })\n      .then((res) => {\n        const resHeaders = res.headers || {};\n        return {\n          status: res.status,\n          statusText: res.statusText,\n          ok: res.ok,\n          headers: {\n            get: (name) => {\n              const value = resHeaders[String(name).toLowerCase()];\n              return value === undefined ? null : value;\n            },\n          },\n          json: () => Promise.resolve(JSON.parse(res.bodyText)),\n          text: () => Promise.resolve(res.bodyText),\n        };\n      });\n  };\n";
-//# sourceMappingURL=polyfills.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills.js

@@ -1,99 +0,0 @@
-import{FETCH_BRIDGE_FUNCTION_NAME as t,FETCH_BRIDGE_GLOBAL_NAME as e}from"../constants.js";const s=`
-  const URLSearchParams = class URLSearchParams {
-    constructor(init) {
-      this._params = [];
-      if (typeof init === 'string') {
-        const str = init.startsWith('?') ? init.slice(1) : init;
-        for (const pair of (str ? str.split('&') : [])) {
-          const eq = pair.indexOf('=');
-          const k = eq >= 0 ? pair.slice(0, eq) : pair;
-          const v = eq >= 0 ? pair.slice(eq + 1) : '';
-          if (k) this._params.push([decodeURIComponent(k), decodeURIComponent(v)]);
-        }
-      } else if (init != null && typeof init === 'object') {
-        for (const [k, v] of Object.entries(init)) this._params.push([k, String(v)]);
-      }
-    }
-    append(key, value) { this._params.push([String(key), String(value)]); }
-    set(key, value) {
-      const k = String(key), v = String(value);
-      this._params = this._params.filter(([pk]) => pk !== k);
-      this._params.push([k, v]);
-    }
-    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
-    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }
-    has(key) { return this._params.some(([k]) => k === String(key)); }
-    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }
-    entries() { return this._params.values(); }
-    [Symbol.iterator]() { return this._params.values(); }
-    toString() {
-      return this._params
-        .map(([k, v]) => encodeURIComponent(k) + '=' + encodeURIComponent(v))
-        .join('&');
-    }
-  };
-  globalThis.URLSearchParams = URLSearchParams;
-
-  const FormData = class FormData {
-    constructor() { this._fields = []; }
-    append(key, value) { this._fields.push([String(key), String(value)]); }
-    set(key, value) {
-      const k = String(key), v = String(value);
-      this._fields = this._fields.filter(([fk]) => fk !== k);
-      this._fields.push([k, v]);
-    }
-    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
-    has(key) { return this._fields.some(([k]) => k === String(key)); }
-    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }
-    entries() { return this._fields.values(); }
-    [Symbol.iterator]() { return this._fields.values(); }
-  };
-  globalThis.FormData = FormData;
-`,r=`
-  const hostFetch = globalThis.${e}.${t};
-  delete globalThis.${e};
-  globalThis.fetch = (url, init = {}) => {
-    let body;
-    let autoContentType;
-    if (init.body instanceof URLSearchParams) {
-      body = init.body.toString();
-      autoContentType = 'application/x-www-form-urlencoded';
-    } else if (init.body instanceof FormData) {
-      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);
-      body = init.body._fields
-        .map(([k, v]) =>
-          '--' + boundary + '\\r\\nContent-Disposition: form-data; name="' + k + '"\\r\\n\\r\\n' + v,
-        )
-        .join('\\r\\n') + '\\r\\n--' + boundary + '--';
-      autoContentType = 'multipart/form-data; boundary=' + boundary;
-    } else if (init.body != null && typeof init.body !== 'string') {
-      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');
-    } else {
-      body = init.body ?? undefined;
-    }
-    const callerHeaders = init.headers;
-    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(
-      (k) => k.toLowerCase() === 'content-type',
-    );
-    const headers = autoContentType && !hasContentType
-      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)
-      : callerHeaders;
-    return hostFetch({ url: String(url), method: init.method, headers, body })
-      .then((res) => {
-        const resHeaders = res.headers || {};
-        return {
-          status: res.status,
-          statusText: res.statusText,
-          ok: res.ok,
-          headers: {
-            get: (name) => {
-              const value = resHeaders[String(name).toLowerCase()];
-              return value === undefined ? null : value;
-            },
-          },
-          json: () => Promise.resolve(JSON.parse(res.bodyText)),
-          text: () => Promise.resolve(res.bodyText),
-        };
-      });
-  };
-`,i=`${s}${r}`;export{i as SANDBOX_FETCH_SETUP};