@redocly/realm 0.136.0-next.9 → 0.136.0

package/dist/server/plugins/mcp/codemode/prompts.js

@@ -1,4 +1,7 @@
-const t="Both `execute` arguments are required: `code` (the JavaScript to run; return a value to receive it) and `description` (a short human-readable summary of what the code does).";function o(e){return["Run JavaScript in a sandbox against the documentation tools on the global `tools` object.",e?"The only extra globals are `tools` and `fetch` - there is no `console`, `setTimeout`, `require`, or Node.js API; all other I/O goes through `tools`.":"The only extra global is `tools` - there is no `fetch`, `console`, `setTimeout`, `require`, or Node.js API; all I/O goes through `tools`.","","Workflow - minimize round-trips; one `describe-tools` call plus one `execute` call covers most requests:","1. Analyze the request and decide which sandbox tools it needs (every tool name is listed in the `describe-tools` input schema / description).","2. Call `describe-tools` with those names to get their exact TypeScript signatures - inputs AND result shapes. NEVER call `execute` with guessed method names, parameter names, enum values, or result field names: read fields off the declared return types, not from assumptions.","3. Batch everything into a SINGLE script: chain tool calls, pass one call's output into the next, process results in plain JavaScript, and `return` only what the request needs.","",...e?["Example - list the Billing API endpoints and call one of them:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const ep = endpoints.find((e) => e.method === 'POST' && e.path.includes('invoices'));","const info = await tools.getEndpointInfo({ name: items[0].name, path: ep.path, method: ep.method });","const url = (info.servers?.[0]?.url ?? '') + ep.path;","try {","  const res = await fetch(url, { method: 'POST', body: JSON.stringify({ /* fields from info */ }) });","  return res.ok ? await res.json() : { status: res.status, error: await res.text() };","} catch (error) {","  return { error: error instanceof Error ? error.message : String(error), endpointId: info };","}","```"]:["Example - list the write endpoints of an API:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const writes = endpoints.filter((e) => e.method !== 'GET');","return { api: items[0].name, writes: writes.map((e) => `${e.method} ${e.path}`) };","```"]].join(`
-`)}const s=["Get the exact TypeScript signatures of the sandbox tools available to `execute`.","Analyze the user request first, then pass `tools` with only the tool names the request needs (every name is listed in this input schema / description); omit `tools` only when you cannot tell which tools apply.","Always call this before your first `execute` and never guess signatures. Request every tool the task may need in ONE call instead of calling this repeatedly."].join(`
-`);function n(e){return["This server exposes documentation tools (API discovery, endpoint details, security schemes, full-text search) through two tools:","- `describe-tools` returns the exact TypeScript signatures of the sandbox tools.","- `execute` runs JavaScript that calls those tools on the global `tools` object.","Workflow: analyze the request, call `describe-tools` once with only the tool names it needs, then batch everything into a single `execute` script. Minimize round-trips and never guess tool signatures.",e?"The sandbox also has a global `fetch` that can call the documented APIs (allow-listed hosts only). Include `fetch` in your `describe-tools` call to get its contract and the list of callable APIs.":""].join(`
-`)}const i="Types named `OpenApi\u2026` are the standard OpenAPI Specification objects.";export{s as DESCRIBE_TOOLS_DESCRIPTION,t as EXECUTE_ARGS_NOTE,i as USAGE_NOTES,n as buildCodeModeInstructions,o as buildExecuteDescription};
+import{buildToolList as i}from"./build-tool-list.js";const l=2048,c="Both `execute` arguments are required: `code` (the JavaScript to run; return a value to receive it) and `description` (a short human-readable summary of what the code does).",n="Available tools (exact signatures come from `describe-tools`):";function a(e,t){if(t.length===0)return e;const o=l-e.length-n.length-3,s=i(t,o);return s?[e,"",n,s].join(`
+`):e}function h(e,t=[]){const o=["Run JavaScript in a sandbox against the documentation tools on the global `tools` object.",e?"The extra globals are `tools`, `fetch`, `URL`, `URLSearchParams`, and `FormData` - there is no `console`, `setTimeout`, `require`, or Node.js API; all other I/O goes through `tools`.":"The only extra global is `tools` - there is no `fetch`, `console`, `setTimeout`, `require`, or Node.js API; all I/O goes through `tools`.","","Workflow - minimize round-trips; one `describe-tools` call plus one `execute` call covers most requests:","1. Analyze the request and decide which sandbox tools it needs.","2. Call `describe-tools` with those names to get their exact TypeScript signatures - inputs, result shapes, and a worked example. NEVER call `execute` with guessed method names, parameter names, enum values, or result field names: read fields off the declared return types, not from assumptions.","3. Batch everything into a SINGLE script: chain tool calls, pass one call's output into the next, process results in plain JavaScript, and `return` only what the request needs."].join(`
+`);return a(o,t)}const d=["Get the exact TypeScript signatures of the sandbox tools available to `execute`.","Analyze the user request first, then pass `tools` with only the tool names the request needs (every name is listed in this input schema / description); omit `tools` only when you cannot tell which tools apply.","Always call this before your first `execute` and never guess signatures. Request every tool the task may need in ONE call instead of calling this repeatedly."].join(`
+`);function u(e,t=[]){const o=["This server exposes documentation tools (API discovery, endpoint details, security schemes, full-text search) through two tools:","- `describe-tools` returns the exact TypeScript signatures of the sandbox tools.","- `execute` runs JavaScript that calls those tools on the global `tools` object.","Workflow: analyze the request, call `describe-tools` once with only the tool names it needs, then batch everything into a single `execute` script. Minimize round-trips and never guess tool signatures.",...e?["The sandbox also has a global `fetch` that can call the documented APIs (allow-listed hosts only). Include `fetch` in your `describe-tools` call to get its contract and the list of callable APIs."]:[]].join(`
+`);return a(o,t)}const p=["Example - list the write endpoints of an API:","","```ts","const { items } = await tools.listApis({ filter: 'billing' });","const { endpoints } = await tools.getEndpoints({ name: items[0].name });","const writes = endpoints.filter((e) => e.method !== 'GET');","return { api: items[0].name, writes: writes.map((e) => `${e.method} ${e.path}`) };","```"].join(`
+`),m=["Types named `OpenApi\u2026` are the standard OpenAPI Specification objects.","Payload samples live on a media type object (`requestBody.content[mediaType]`, `responses[code].content[mediaType]`): `.example` holds a single value, `.examples[name].value` a named map, and some descriptions only set `.schema.example`. Read each before concluding a sample is absent."].join(`
+`);export{d as DESCRIBE_TOOLS_DESCRIPTION,l as DESCRIPTION_CHAR_LIMIT,c as EXECUTE_ARGS_NOTE,p as PLAIN_EXECUTE_EXAMPLE,m as USAGE_NOTES,u as buildCodeModeInstructions,h as buildExecuteDescription};

package/dist/server/plugins/mcp/codemode/sandbox/create-sandbox-setup.js

@@ -1,4 +1,4 @@
-import{setupHostFunctions as a}from"../../../../sandbox/utils/setup-host-functions.js";import{evalGuestCode as p}from"../../../../sandbox/utils/eval-guest-code.js";import{SANDBOX_FETCH_SETUP as i}from"./polyfills.js";import{FETCH_BRIDGE_FUNCTION_NAME as u,FETCH_BRIDGE_GLOBAL_NAME as c,TOOLS_BRIDGE_GLOBAL_NAME as n}from"../constants.js";const m=100,f=50;function T(r,t){return(e,l)=>{const s=[a(e,r,{globalName:n,budget:l,maxCalls:m,messages:{outputTooLarge:o=>`Tool output is too large (${o} bytes); request narrower data instead`,callLimitExceeded:o=>`Exceeded the limit of ${o} tool calls`}})];return t&&s.push(a(e,{[u]:o=>t(o)},{globalName:c,budget:l,maxCalls:f,messages:{outputTooLarge:o=>`Response is too large (${o} bytes); request less data`,callLimitExceeded:o=>`Exceeded the limit of ${o} fetch calls`}})),p(e,E(!!t)),()=>{for(const o of s)o()}}}function E(r){const t=r?i:"",e=`globalThis[${JSON.stringify(n)}]`;return`(() => {${t}
+import{setupHostFunctions as a}from"../../../../sandbox/utils/setup-host-functions.js";import{evalGuestCode as p}from"../../../../sandbox/utils/eval-guest-code.js";import{SANDBOX_FETCH_SETUP as i}from"./polyfills/index.js";import{FETCH_BRIDGE_FUNCTION_NAME as u,FETCH_BRIDGE_GLOBAL_NAME as c,TOOLS_BRIDGE_GLOBAL_NAME as n}from"../constants.js";const m=100,f=50;function T(r,t){return(e,l)=>{const s=[a(e,r,{globalName:n,budget:l,maxCalls:m,messages:{outputTooLarge:o=>`Tool output is too large (${o} bytes); request narrower data instead`,callLimitExceeded:o=>`Exceeded the limit of ${o} tool calls`}})];return t&&s.push(a(e,{[u]:o=>t(o)},{globalName:c,budget:l,maxCalls:f,messages:{outputTooLarge:o=>`Response is too large (${o} bytes); request less data`,callLimitExceeded:o=>`Exceeded the limit of ${o} fetch calls`}})),p(e,E(!!t)),()=>{for(const o of s)o()}}}function E(r){const t=r?i:"",e=`globalThis[${JSON.stringify(n)}]`;return`(() => {${t}
     const tools = ${e};
     ${e} = new Proxy(tools, {
       get(target, prop) {

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/fetch-shim.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `fetch`: not a polyfill but a bridge. It takes the host rail off the global object so guest
+ * code cannot reach it directly, encodes the body, and hands the host a plain request.
+ */
+export declare const FETCH_SHIM = "\n  const hostFetch = globalThis.__fetchBridge.fetch;\n  delete globalThis.__fetchBridge;\n  // RFC 7578: a field name travels with its quote and line breaks escaped, so a name cannot close its own header and open a part the caller did not write.\n  const escapeFieldName = (name) =>\n    String(name).replace(\n      /[\"\\r\\n]/g,\n      (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'),\n    );\n  globalThis.fetch = (url, init = {}) => {\n    let body;\n    let autoContentType;\n    if (init.body instanceof URLSearchParams) {\n      body = init.body.toString();\n      autoContentType = 'application/x-www-form-urlencoded';\n    } else if (init.body instanceof FormData) {\n      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);\n      body = init.body._fields\n        .map(([k, v]) =>\n          '--' + boundary + '\\r\\nContent-Disposition: form-data; name=\"' + escapeFieldName(k) + '\"\\r\\n\\r\\n' + v,\n        )\n        .join('\\r\\n') + '\\r\\n--' + boundary + '--';\n      autoContentType = 'multipart/form-data; boundary=' + boundary;\n    } else if (init.body != null && typeof init.body !== 'string') {\n      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');\n    } else {\n      body = init.body ?? undefined;\n    }\n    const callerHeaders = init.headers;\n    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(\n      (k) => k.toLowerCase() === 'content-type',\n    );\n    const headers = autoContentType && !hasContentType\n      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)\n      : callerHeaders;\n    return hostFetch({ url: String(url), method: init.method, headers, body })\n      .then((res) => {\n        const resHeaders = res.headers || {};\n        return {\n          status: res.status,\n          statusText: res.statusText,\n          ok: res.ok,\n          headers: {\n            get: (name) => {\n              const value = resHeaders[String(name).toLowerCase()];\n              return value === undefined ? null : value;\n            },\n          },\n          json: () => Promise.resolve(JSON.parse(res.bodyText)),\n          text: () => Promise.resolve(res.bodyText),\n        };\n      });\n  };\n";
+//# sourceMappingURL=fetch-shim.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/fetch-shim.js

@@ -0,0 +1,54 @@
+import{FETCH_BRIDGE_FUNCTION_NAME as t,FETCH_BRIDGE_GLOBAL_NAME as e}from"../../constants.js";const n=`
+  const hostFetch = globalThis.${e}.${t};
+  delete globalThis.${e};
+  // RFC 7578: a field name travels with its quote and line breaks escaped, so a name cannot close its own header and open a part the caller did not write.
+  const escapeFieldName = (name) =>
+    String(name).replace(
+      /["\\r\\n]/g,
+      (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0'),
+    );
+  globalThis.fetch = (url, init = {}) => {
+    let body;
+    let autoContentType;
+    if (init.body instanceof URLSearchParams) {
+      body = init.body.toString();
+      autoContentType = 'application/x-www-form-urlencoded';
+    } else if (init.body instanceof FormData) {
+      const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);
+      body = init.body._fields
+        .map(([k, v]) =>
+          '--' + boundary + '\\r\\nContent-Disposition: form-data; name="' + escapeFieldName(k) + '"\\r\\n\\r\\n' + v,
+        )
+        .join('\\r\\n') + '\\r\\n--' + boundary + '--';
+      autoContentType = 'multipart/form-data; boundary=' + boundary;
+    } else if (init.body != null && typeof init.body !== 'string') {
+      throw new TypeError('fetch body must be a string, URLSearchParams, or FormData');
+    } else {
+      body = init.body ?? undefined;
+    }
+    const callerHeaders = init.headers;
+    const hasContentType = callerHeaders != null && Object.keys(callerHeaders).some(
+      (k) => k.toLowerCase() === 'content-type',
+    );
+    const headers = autoContentType && !hasContentType
+      ? Object.assign({ 'content-type': autoContentType }, callerHeaders)
+      : callerHeaders;
+    return hostFetch({ url: String(url), method: init.method, headers, body })
+      .then((res) => {
+        const resHeaders = res.headers || {};
+        return {
+          status: res.status,
+          statusText: res.statusText,
+          ok: res.ok,
+          headers: {
+            get: (name) => {
+              const value = resHeaders[String(name).toLowerCase()];
+              return value === undefined ? null : value;
+            },
+          },
+          json: () => Promise.resolve(JSON.parse(res.bodyText)),
+          text: () => Promise.resolve(res.bodyText),
+        };
+      });
+  };
+`;export{n as FETCH_SHIM};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/form-data.d.ts

@@ -0,0 +1,3 @@
+/** `FormData`: the multipart body the fetch shim serializes. */
+export declare const FORM_DATA_POLYFILL = "\n  const FormData = class FormData {\n    constructor() { this._fields = []; }\n    append(key, value) { this._fields.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      this._fields = this._fields.filter(([fk]) => fk !== k);\n      this._fields.push([k, v]);\n    }\n    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    has(key) { return this._fields.some(([k]) => k === String(key)); }\n    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }\n    entries() { return this._fields.values(); }\n    [Symbol.iterator]() { return this._fields.values(); }\n  };\n  globalThis.FormData = FormData;\n";
+//# sourceMappingURL=form-data.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/form-data.js

@@ -0,0 +1,17 @@
+const e=`
+  const FormData = class FormData {
+    constructor() { this._fields = []; }
+    append(key, value) { this._fields.push([String(key), String(value)]); }
+    set(key, value) {
+      const k = String(key), v = String(value);
+      this._fields = this._fields.filter(([fk]) => fk !== k);
+      this._fields.push([k, v]);
+    }
+    get(key) { return (this._fields.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
+    has(key) { return this._fields.some(([k]) => k === String(key)); }
+    delete(key) { this._fields = this._fields.filter(([k]) => k !== String(key)); }
+    entries() { return this._fields.values(); }
+    [Symbol.iterator]() { return this._fields.values(); }
+  };
+  globalThis.FormData = FormData;
+`;export{e as FORM_DATA_POLYFILL};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/index.d.ts

@@ -0,0 +1,3 @@
+/** The guest prelude installed when the gateway fetch capability is on */
+export declare const SANDBOX_FETCH_SETUP: string;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/index.js

@@ -0,0 +1,2 @@
+import{FETCH_SHIM as o}from"./fetch-shim.js";import{FORM_DATA_POLYFILL as L}from"./form-data.js";import{URL_POLYFILL as r}from"./url.js";import{URL_SEARCH_PARAMS_POLYFILL as _}from"./url-search-params.js";const i=[_,r,L,o].join(`
+`);export{i as SANDBOX_FETCH_SETUP};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url-search-params.d.ts

@@ -0,0 +1,3 @@
+/** `URLSearchParams`: query-string parsing and serialization, and the store behind `URL.searchParams`. */
+export declare const URL_SEARCH_PARAMS_POLYFILL = "\n  // application/x-www-form-urlencoded reads '+' as a space, and leaves an escape it cannot read alone.\n  // Decoding one well-formed run at a time is what keeps a stray '%' \u2014 '?discount=50%', a half-encoded cursor \u2014 from throwing URIError and ending the run.\n  const decodeFormPart = (value) =>\n    value.replace(/\\+/g, ' ').replace(/(?:%[0-9A-Fa-f]{2})+/g, (escaped) => {\n      try { return decodeURIComponent(escaped); } catch (error) { return escaped; }\n    });\n\n  // The same rules in reverse: everything but alphanumerics and * - . _ is percent-encoded, and a space is '+'. encodeURIComponent keeps !'()~ literal, so those are encoded after it runs.\n  const encodeFormPart = (value) =>\n    encodeURIComponent(String(value))\n      .replace(/%20/g, '+')\n      .replace(/[!'()~]/g, (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase());\n\n  const URLSearchParams = class URLSearchParams {\n    constructor(init) {\n      this._params = [];\n      if (init == null) return;\n      if (typeof init === 'string') {\n        const str = init.startsWith('?') ? init.slice(1) : init;\n        for (const pair of (str ? str.split('&') : [])) {\n          if (pair === '') continue;\n          const eq = pair.indexOf('=');\n          const key = eq >= 0 ? pair.slice(0, eq) : pair;\n          const value = eq >= 0 ? pair.slice(eq + 1) : '';\n          this._params.push([decodeFormPart(key), decodeFormPart(value)]);\n        }\n      } else if (typeof init[Symbol.iterator] === 'function') {\n        // [['a', '1'], ['b', '2']] and another URLSearchParams both arrive here.\n        for (const [key, value] of init) this._params.push([String(key), String(value)]);\n      } else if (typeof init === 'object') {\n        for (const [key, value] of Object.entries(init)) this._params.push([key, String(value)]);\n      }\n    }\n    get size() { return this._params.length; }\n    append(key, value) { this._params.push([String(key), String(value)]); }\n    set(key, value) {\n      const k = String(key), v = String(value);\n      const at = this._params.findIndex(([pk]) => pk === k);\n      if (at === -1) { this._params.push([k, v]); return; }\n      // Overwrite where the key already sat, so an edit does not reorder the query the server sent.\n      this._params[at] = [k, v];\n      this._params = this._params.filter(([pk], index) => pk !== k || index === at);\n    }\n    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }\n    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }\n    has(key) { return this._params.some(([k]) => k === String(key)); }\n    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }\n    forEach(callback, thisArg) {\n      for (const [k, v] of [...this._params]) callback.call(thisArg, v, k, this);\n    }\n    keys() { return this._params.map(([k]) => k).values(); }\n    values() { return this._params.map(([, v]) => v).values(); }\n    entries() { return this._params.map(([k, v]) => [k, v]).values(); }\n    sort() { this._params.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)); }\n    [Symbol.iterator]() { return this.entries(); }\n    toString() {\n      return this._params\n        .map(([k, v]) => encodeFormPart(k) + '=' + encodeFormPart(v))\n        .join('&');\n    }\n  };\n  globalThis.URLSearchParams = URLSearchParams;\n";
+//# sourceMappingURL=url-search-params.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url-search-params.js

@@ -0,0 +1,64 @@
+const e=`
+  // application/x-www-form-urlencoded reads '+' as a space, and leaves an escape it cannot read alone.
+  // Decoding one well-formed run at a time is what keeps a stray '%' \u2014 '?discount=50%', a half-encoded cursor \u2014 from throwing URIError and ending the run.
+  const decodeFormPart = (value) =>
+    value.replace(/\\+/g, ' ').replace(/(?:%[0-9A-Fa-f]{2})+/g, (escaped) => {
+      try { return decodeURIComponent(escaped); } catch (error) { return escaped; }
+    });
+
+  // The same rules in reverse: everything but alphanumerics and * - . _ is percent-encoded, and a space is '+'. encodeURIComponent keeps !'()~ literal, so those are encoded after it runs.
+  const encodeFormPart = (value) =>
+    encodeURIComponent(String(value))
+      .replace(/%20/g, '+')
+      .replace(/[!'()~]/g, (char) => '%' + char.charCodeAt(0).toString(16).toUpperCase());
+
+  const URLSearchParams = class URLSearchParams {
+    constructor(init) {
+      this._params = [];
+      if (init == null) return;
+      if (typeof init === 'string') {
+        const str = init.startsWith('?') ? init.slice(1) : init;
+        for (const pair of (str ? str.split('&') : [])) {
+          if (pair === '') continue;
+          const eq = pair.indexOf('=');
+          const key = eq >= 0 ? pair.slice(0, eq) : pair;
+          const value = eq >= 0 ? pair.slice(eq + 1) : '';
+          this._params.push([decodeFormPart(key), decodeFormPart(value)]);
+        }
+      } else if (typeof init[Symbol.iterator] === 'function') {
+        // [['a', '1'], ['b', '2']] and another URLSearchParams both arrive here.
+        for (const [key, value] of init) this._params.push([String(key), String(value)]);
+      } else if (typeof init === 'object') {
+        for (const [key, value] of Object.entries(init)) this._params.push([key, String(value)]);
+      }
+    }
+    get size() { return this._params.length; }
+    append(key, value) { this._params.push([String(key), String(value)]); }
+    set(key, value) {
+      const k = String(key), v = String(value);
+      const at = this._params.findIndex(([pk]) => pk === k);
+      if (at === -1) { this._params.push([k, v]); return; }
+      // Overwrite where the key already sat, so an edit does not reorder the query the server sent.
+      this._params[at] = [k, v];
+      this._params = this._params.filter(([pk], index) => pk !== k || index === at);
+    }
+    get(key) { return (this._params.find(([k]) => k === String(key)) ?? [undefined, null])[1]; }
+    getAll(key) { return this._params.filter(([k]) => k === String(key)).map(([, v]) => v); }
+    has(key) { return this._params.some(([k]) => k === String(key)); }
+    delete(key) { this._params = this._params.filter(([k]) => k !== String(key)); }
+    forEach(callback, thisArg) {
+      for (const [k, v] of [...this._params]) callback.call(thisArg, v, k, this);
+    }
+    keys() { return this._params.map(([k]) => k).values(); }
+    values() { return this._params.map(([, v]) => v).values(); }
+    entries() { return this._params.map(([k, v]) => [k, v]).values(); }
+    sort() { this._params.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)); }
+    [Symbol.iterator]() { return this.entries(); }
+    toString() {
+      return this._params
+        .map(([k, v]) => encodeFormPart(k) + '=' + encodeFormPart(v))
+        .join('&');
+    }
+  };
+  globalThis.URLSearchParams = URLSearchParams;
+`;export{e as URL_SEARCH_PARAMS_POLYFILL};

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.d.ts

@@ -0,0 +1,3 @@
+/** `URL`: parses and resolves a url string, and exposes its parts. */
+export declare const URL_POLYFILL = "\n  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads\n  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name\n  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.\n  const normalizePath = (rawPath) => {\n    const path = rawPath.replace(/\\\\/g, '/');\n    const out = [];\n    for (const segment of path.split('/')) {\n      if (segment === '.') continue;\n      if (segment === '..') { if (out.length > 1) out.pop(); continue; }\n      out.push(segment);\n    }\n    let joined = out.join('/');\n    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';\n    return joined;\n  };\n\n  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };\n\n  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query\n  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a\n  // surrogate pair is encoded as the one character it stands for.\n  const encodeLiterals = (value) =>\n    value.replace(/[\\s\"<>\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {\n      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }\n    });\n\n  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox\n  // does not carry. The host re-parses the url before it fetches, so the request still goes to the\n  // punycoded name; only what guest code reads back differs.\n  const parseHostPort = (hostport, scheme) => {\n    let hostname = hostport;\n    let port = '';\n    if (hostport.startsWith('[')) {\n      const close = hostport.indexOf(']');\n      hostname = hostport.slice(0, close + 1);\n      const after = hostport.slice(close + 1);\n      if (after.startsWith(':')) port = after.slice(1);\n    } else {\n      const colon = hostport.lastIndexOf(':');\n      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }\n    }\n    if (port !== '' && !/^[0-9]+$/.test(port)) return null;\n    if (hostname === '') return null;\n    return {\n      hostname: hostname.toLowerCase(),\n      port: DEFAULT_PORTS[scheme] === port ? '' : port,\n      // A host written without a port leaves the port alone, rather than clearing it.\n      hasPort: port !== '',\n    };\n  };\n\n  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;\n\n  const parseAuthorityUrl = (scheme, rest) => {\n    const cut = rest.search(/[/\\\\?#]/);\n    const authority = cut === -1 ? rest : rest.slice(0, cut);\n    let tail = cut === -1 ? '' : rest.slice(cut);\n    let username = '';\n    let password = '';\n    let hostport = authority;\n    const at = authority.lastIndexOf('@');\n    if (at !== -1) {\n      const credentials = authority.slice(0, at);\n      hostport = authority.slice(at + 1);\n      const colon = credentials.indexOf(':');\n      username = colon === -1 ? credentials : credentials.slice(0, colon);\n      password = colon === -1 ? '' : credentials.slice(colon + 1);\n    }\n    const hostPort = parseHostPort(hostport, scheme);\n    if (!hostPort) return null;\n    let hash = '';\n    const hashAt = tail.indexOf('#');\n    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }\n    let search = '';\n    const queryAt = tail.indexOf('?');\n    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }\n    let pathname = tail === '' ? '/' : tail;\n    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;\n    return {\n      protocol: scheme,\n      username,\n      password,\n      hostname: hostPort.hostname,\n      port: hostPort.port,\n      pathname: encodeLiterals(normalizePath(pathname)),\n      search: encodeLiterals(search === '?' ? '' : search),\n      hash: encodeLiterals(hash === '#' ? '' : hash),\n    };\n  };\n\n  const parseUrl = (input, base) => {\n    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and\n    // a url copied out of a wrapped response body is the usual way one gets in here.\n    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');\n    const matched = ABSOLUTE_RE.exec(str);\n    // A scheme with no `//` (mailto:, data:) is not a fetch target, so it is not resolved.\n    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;\n    if (base === undefined) return null;\n    const resolved = parseUrl(base, undefined);\n    if (!resolved) return null;\n    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));\n    const parts = { ...resolved };\n    if (str.startsWith('#')) {\n      parts.hash = encodeLiterals(str === '#' ? '' : str);\n      return parts;\n    }\n    let rest = str;\n    let hash = '';\n    const hashAt = rest.indexOf('#');\n    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }\n    let search = '';\n    const queryAt = rest.indexOf('?');\n    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }\n    if (rest !== '') {\n      const absolute = /^[/\\\\]/.test(rest)\n        ? rest\n        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;\n      parts.pathname = encodeLiterals(normalizePath(absolute));\n    }\n    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).\n    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);\n    parts.hash = encodeLiterals(hash === '#' ? '' : hash);\n    return parts;\n  };\n\n  const URL = class URL {\n    constructor(input, base) {\n      const parsed = parseUrl(input, base === undefined ? undefined : String(base));\n      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));\n      this._parts = parsed;\n      this._params = undefined;\n      this._edited = false;\n    }\n    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart\n    // and putting it back together does not re-encode what the server sent.\n    _applyParams() {\n      if (this._edited && this._params) {\n        const query = this._params.toString();\n        this._parts.search = query ? '?' + query : '';\n        this._edited = false;\n      }\n    }\n    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing\n    // setter would swallow `url.host = \u2026` and fetch the address the caller meant to replace.\n    get protocol() { return this._parts.protocol; }\n    set protocol(value) {\n      const next = String(value).toLowerCase().replace(/:$/, '') + ':';\n      // Only a scheme that carries an authority can replace one, the way the host parser reads it.\n      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;\n    }\n    get username() { return this._parts.username; }\n    set username(value) { this._parts.username = String(value); }\n    get password() { return this._parts.password; }\n    set password(value) { this._parts.password = String(value); }\n    get hostname() { return this._parts.hostname; }\n    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }\n    get port() { return this._parts.port; }\n    set port(value) {\n      const port = String(value);\n      if (port !== '' && !/^[0-9]+$/.test(port)) return;\n      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;\n    }\n    get host() {\n      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;\n    }\n    set host(value) {\n      const parsed = parseHostPort(String(value), this._parts.protocol);\n      if (!parsed) return;\n      this._parts.hostname = parsed.hostname;\n      if (parsed.hasPort) this._parts.port = parsed.port;\n    }\n    get origin() { return this._parts.protocol + '//' + this.host; }\n    get pathname() { return this._parts.pathname; }\n    set pathname(value) {\n      const path = String(value);\n      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);\n    }\n    get search() {\n      this._applyParams();\n      return this._parts.search;\n    }\n    set search(value) {\n      const query = String(value);\n      const body = query.startsWith('?') ? query.slice(1) : query;\n      this._parts.search = body ? encodeLiterals('?' + body) : '';\n      this._params = undefined;\n      this._edited = false;\n    }\n    get searchParams() {\n      if (!this._params) {\n        const params = new URLSearchParams(this._parts.search);\n        const url = this;\n        // Every method that can change the parameters has to mark the query for re-serialization.\n        for (const method of ['append', 'set', 'delete', 'sort']) {\n          const original = params[method];\n          params[method] = function (...args) {\n            url._edited = true;\n            return original.apply(params, args);\n          };\n        }\n        this._params = params;\n      }\n      return this._params;\n    }\n    get hash() { return this._parts.hash; }\n    set hash(value) {\n      const fragment = String(value);\n      this._parts.hash = fragment === ''\n        ? ''\n        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);\n    }\n    get href() {\n      this._applyParams();\n      const credentials = this._parts.username\n        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'\n        : '';\n      return this._parts.protocol + '//' + credentials + this.host +\n        this._parts.pathname + this._parts.search + this._parts.hash;\n    }\n    set href(value) {\n      const parsed = parseUrl(value, undefined);\n      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));\n      this._parts = parsed;\n      this._params = undefined;\n      this._edited = false;\n    }\n    toString() { return this.href; }\n    toJSON() { return this.href; }\n    static canParse(input, base) {\n      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;\n    }\n    static parse(input, base) {\n      const parsed = parseUrl(input, base === undefined ? undefined : String(base));\n      return parsed ? new URL(input, base) : null;\n    }\n  };\n  globalThis.URL = URL;\n";
+//# sourceMappingURL=url.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.js

@@ -0,0 +1,239 @@
+const t=`
+  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads
+  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name
+  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.
+  const normalizePath = (rawPath) => {
+    const path = rawPath.replace(/\\\\/g, '/');
+    const out = [];
+    for (const segment of path.split('/')) {
+      if (segment === '.') continue;
+      if (segment === '..') { if (out.length > 1) out.pop(); continue; }
+      out.push(segment);
+    }
+    let joined = out.join('/');
+    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';
+    return joined;
+  };
+
+  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };
+
+  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query
+  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a
+  // surrogate pair is encoded as the one character it stands for.
+  const encodeLiterals = (value) =>
+    value.replace(/[\\s"<>\\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {
+      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }
+    });
+
+  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox
+  // does not carry. The host re-parses the url before it fetches, so the request still goes to the
+  // punycoded name; only what guest code reads back differs.
+  const parseHostPort = (hostport, scheme) => {
+    let hostname = hostport;
+    let port = '';
+    if (hostport.startsWith('[')) {
+      const close = hostport.indexOf(']');
+      hostname = hostport.slice(0, close + 1);
+      const after = hostport.slice(close + 1);
+      if (after.startsWith(':')) port = after.slice(1);
+    } else {
+      const colon = hostport.lastIndexOf(':');
+      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }
+    }
+    if (port !== '' && !/^[0-9]+$/.test(port)) return null;
+    if (hostname === '') return null;
+    return {
+      hostname: hostname.toLowerCase(),
+      port: DEFAULT_PORTS[scheme] === port ? '' : port,
+      // A host written without a port leaves the port alone, rather than clearing it.
+      hasPort: port !== '',
+    };
+  };
+
+  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;
+
+  const parseAuthorityUrl = (scheme, rest) => {
+    const cut = rest.search(/[/\\\\?#]/);
+    const authority = cut === -1 ? rest : rest.slice(0, cut);
+    let tail = cut === -1 ? '' : rest.slice(cut);
+    let username = '';
+    let password = '';
+    let hostport = authority;
+    const at = authority.lastIndexOf('@');
+    if (at !== -1) {
+      const credentials = authority.slice(0, at);
+      hostport = authority.slice(at + 1);
+      const colon = credentials.indexOf(':');
+      username = colon === -1 ? credentials : credentials.slice(0, colon);
+      password = colon === -1 ? '' : credentials.slice(colon + 1);
+    }
+    const hostPort = parseHostPort(hostport, scheme);
+    if (!hostPort) return null;
+    let hash = '';
+    const hashAt = tail.indexOf('#');
+    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }
+    let search = '';
+    const queryAt = tail.indexOf('?');
+    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }
+    let pathname = tail === '' ? '/' : tail;
+    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;
+    return {
+      protocol: scheme,
+      username,
+      password,
+      hostname: hostPort.hostname,
+      port: hostPort.port,
+      pathname: encodeLiterals(normalizePath(pathname)),
+      search: encodeLiterals(search === '?' ? '' : search),
+      hash: encodeLiterals(hash === '#' ? '' : hash),
+    };
+  };
+
+  const parseUrl = (input, base) => {
+    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and
+    // a url copied out of a wrapped response body is the usual way one gets in here.
+    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');
+    const matched = ABSOLUTE_RE.exec(str);
+    // A scheme with no \`//\` (mailto:, data:) is not a fetch target, so it is not resolved.
+    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;
+    if (base === undefined) return null;
+    const resolved = parseUrl(base, undefined);
+    if (!resolved) return null;
+    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));
+    const parts = { ...resolved };
+    if (str.startsWith('#')) {
+      parts.hash = encodeLiterals(str === '#' ? '' : str);
+      return parts;
+    }
+    let rest = str;
+    let hash = '';
+    const hashAt = rest.indexOf('#');
+    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }
+    let search = '';
+    const queryAt = rest.indexOf('?');
+    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }
+    if (rest !== '') {
+      const absolute = /^[/\\\\]/.test(rest)
+        ? rest
+        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;
+      parts.pathname = encodeLiterals(normalizePath(absolute));
+    }
+    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).
+    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);
+    parts.hash = encodeLiterals(hash === '#' ? '' : hash);
+    return parts;
+  };
+
+  const URL = class URL {
+    constructor(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart
+    // and putting it back together does not re-encode what the server sent.
+    _applyParams() {
+      if (this._edited && this._params) {
+        const query = this._params.toString();
+        this._parts.search = query ? '?' + query : '';
+        this._edited = false;
+      }
+    }
+    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing
+    // setter would swallow \`url.host = \u2026\` and fetch the address the caller meant to replace.
+    get protocol() { return this._parts.protocol; }
+    set protocol(value) {
+      const next = String(value).toLowerCase().replace(/:$/, '') + ':';
+      // Only a scheme that carries an authority can replace one, the way the host parser reads it.
+      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;
+    }
+    get username() { return this._parts.username; }
+    set username(value) { this._parts.username = String(value); }
+    get password() { return this._parts.password; }
+    set password(value) { this._parts.password = String(value); }
+    get hostname() { return this._parts.hostname; }
+    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }
+    get port() { return this._parts.port; }
+    set port(value) {
+      const port = String(value);
+      if (port !== '' && !/^[0-9]+$/.test(port)) return;
+      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;
+    }
+    get host() {
+      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;
+    }
+    set host(value) {
+      const parsed = parseHostPort(String(value), this._parts.protocol);
+      if (!parsed) return;
+      this._parts.hostname = parsed.hostname;
+      if (parsed.hasPort) this._parts.port = parsed.port;
+    }
+    get origin() { return this._parts.protocol + '//' + this.host; }
+    get pathname() { return this._parts.pathname; }
+    set pathname(value) {
+      const path = String(value);
+      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);
+    }
+    get search() {
+      this._applyParams();
+      return this._parts.search;
+    }
+    set search(value) {
+      const query = String(value);
+      const body = query.startsWith('?') ? query.slice(1) : query;
+      this._parts.search = body ? encodeLiterals('?' + body) : '';
+      this._params = undefined;
+      this._edited = false;
+    }
+    get searchParams() {
+      if (!this._params) {
+        const params = new URLSearchParams(this._parts.search);
+        const url = this;
+        // Every method that can change the parameters has to mark the query for re-serialization.
+        for (const method of ['append', 'set', 'delete', 'sort']) {
+          const original = params[method];
+          params[method] = function (...args) {
+            url._edited = true;
+            return original.apply(params, args);
+          };
+        }
+        this._params = params;
+      }
+      return this._params;
+    }
+    get hash() { return this._parts.hash; }
+    set hash(value) {
+      const fragment = String(value);
+      this._parts.hash = fragment === ''
+        ? ''
+        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);
+    }
+    get href() {
+      this._applyParams();
+      const credentials = this._parts.username
+        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'
+        : '';
+      return this._parts.protocol + '//' + credentials + this.host +
+        this._parts.pathname + this._parts.search + this._parts.hash;
+    }
+    set href(value) {
+      const parsed = parseUrl(value, undefined);
+      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));
+      this._parts = parsed;
+      this._params = undefined;
+      this._edited = false;
+    }
+    toString() { return this.href; }
+    toJSON() { return this.href; }
+    static canParse(input, base) {
+      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;
+    }
+    static parse(input, base) {
+      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
+      return parsed ? new URL(input, base) : null;
+    }
+  };
+  globalThis.URL = URL;
+`;export{t as URL_POLYFILL};

package/dist/server/plugins/mcp/codemode/tools/describe-tools.js

@@ -1 +1 @@
-import{renderDescribeToolsOutput as w}from"../capabilities/index.js";import{sanitizeToolName as o}from"../build-tool-type-declarations.js";function g(i,l){const n=[...new Set([...i.map(s=>o(s.name)),...l.map(s=>o(s.id))])];return{type:"object",required:[],additionalProperties:!1,properties:{tools:{type:"array",description:`Tool names to describe: ${n.join(", ")}. Omit to describe everything.`,items:{type:"string"},nullable:!0}}}}function v(i,l,n,s){const r=new Map(i.map(t=>[o(t.name),t])),c=new Map(n.map(t=>[o(t.id),t]));return async t=>{const a=[...new Set((t.tools??[]).map(o))],p=a.length===0,m=a.filter(e=>!r.has(e)&&!c.has(e));if(m.length>0){const e=[...r.keys(),...c.keys()];throw new Error(`Unknown tool(s): ${m.join(", ")}. Valid tools: ${e.join(", ")}.`)}const u=p?n:n.filter(e=>a.includes(o(e.id))),d=p?i:a.filter(e=>r.has(e)).map(e=>r.get(e)),y=await Promise.all(d.map(e=>l(e.name))),f=d.filter((e,b)=>y[b]);return{content:[{type:"text",text:w(f,u,s)}]}}}export{v as describeTools,g as describeToolsSchema};
+import{renderDescribeToolsOutput as k}from"../capabilities/index.js";import{McpServerType as h}from"../../constants.js";import{reportMcpToolCalled as E,reportMcpToolError as S}from"../../workers/mcp-tool-telemetry.js";import{DESCRIBE_TOOLS_TOOL_NAME as w}from"../constants.js";import{sanitizeToolName as s}from"../build-tool-type-declarations.js";import{UnknownToolError as T}from"./tool-errors.js";function x(i,l){const r=[...new Set([...i.map(n=>s(n.name)),...l.map(n=>s(n.id))])];return{type:"object",required:[],additionalProperties:!1,properties:{tools:{type:"array",description:`Tool names to describe: ${r.join(", ")}. Omit to describe everything.`,items:r.length>0?{type:"string",enum:r}:{type:"string"},nullable:!0}}}}function L(i,l,r,n){const c=new Map(i.map(t=>[s(t.name),t])),p=new Map(r.map(t=>[s(t.id),t]));return async t=>{const m=performance.now(),d=n.mcpMode??"code";try{const o=[...new Set((t.tools??[]).map(s))],a=o.length===0,f=o.filter(e=>!c.has(e)&&!p.has(e));if(f.length>0){const e=[...c.keys(),...p.keys()];throw new T(`Unknown tool(s): ${f.join(", ")}. Valid tools: ${e.join(", ")}.`)}const g=a?r:r.filter(e=>o.includes(s(e.id))),u=a?i:o.filter(e=>c.has(e)).map(e=>c.get(e)),M=await Promise.all(u.map(e=>l(e.name))),b=u.filter((e,v)=>M[v]),y=k(b,g,n);return E({tool:w,mode:d,serverType:h.Docs,durationMs:Math.round(performance.now()-m),outputLength:y.length}),{content:[{type:"text",text:y}]}}catch(o){const a=o instanceof T;throw S({tool:w,mode:d,serverType:h.Docs,durationMs:Math.round(performance.now()-m),message:o instanceof Error?o.message:String(o),stack:!a&&o instanceof Error&&o.stack||"",errorClass:a?"tool_error":"server_error"}),o}}}export{L as describeTools,x as describeToolsSchema};

package/dist/server/plugins/mcp/codemode/tools/execute.js

@@ -1 +1 @@
-import{mcpToolHandlers as l}from"../../../../../client/mcp-tool-handlers-entry.js";import{runInSandbox as p}from"../../../../sandbox/sandbox.js";import{isMcpToolAvailable as h}from"../../workers/execute-mcp-tool.js";import{buildExecuteHostFetch as b,isFetchCapable as E}from"../../gateway-mcp/fetch-capability.js";import{withAuthRequiredMeta as T}from"../../gateway-mcp/upstream-auth.js";import{CODE_MODE_TOOL_NAMES as O,EXECUTE_TOOL_NAME as A}from"../constants.js";import{sanitizeToolName as C}from"../build-tool-type-declarations.js";import{invokeTool as w}from"../invoke-tool.js";import{createSandboxSetup as x}from"../sandbox/create-sandbox-setup.js";import{auditCode as M}from"../code-audit.js";import{reportCodeExecuted as v}from"../code-execution-telemetry.js";const y=async(t,e,r)=>{const o=await N(e,r),n=[],i=E(e)?b(e,s=>n.push(s)):void 0;let c=0;const u=i?s=>(c+=1,i(s)):void 0,d=M(t.code),m=Date.now(),{result:f,error:a}=await p(t.code,{setupContext:x(o,u)});return v({audit:d,fetchCount:c,outcome:a===void 0?"ok":"error",durationMs:Date.now()-m}),T({content:[{type:"text",text:JSON.stringify({result:f,error:a})}],isError:a!==void 0},n)};async function N(t,e){const r={};for(const o of Object.keys(l))O.has(o)||!await h({toolName:o,context:t}).catch(()=>!1)||(r[C(o)]=i=>w(o,i,t,e));return r}var B={[A]:y};export{B as default};
+import{mcpToolHandlers as l}from"../../../../../client/mcp-tool-handlers-entry.js";import{runInSandbox as p}from"../../../../sandbox/sandbox.js";import{isMcpToolAvailable as h}from"../../workers/execute-mcp-tool.js";import{buildExecuteHostFetch as b,isFetchCapable as E}from"../../gateway-mcp/fetch-capability.js";import{withAuthRequiredMeta as T}from"../../gateway-mcp/upstream-auth.js";import{CODE_MODE_TOOL_NAMES as C,EXECUTE_TOOL_NAME as O}from"../constants.js";import{sanitizeToolName as A}from"../build-tool-type-declarations.js";import{invokeTool as w}from"../invoke-tool.js";import{createSandboxSetup as x}from"../sandbox/create-sandbox-setup.js";import{auditCode as y}from"../code-audit.js";import{reportCodeExecuted as M}from"../code-execution-telemetry.js";import{logCodeExecutionAudit as N}from"../code-execution-audit.js";const v=async(e,t,r)=>{const o=await F(t,r),n=[],i=E(t)?b(t,c=>n.push(c)):void 0;let a=0;const u=i?c=>(a+=1,i(c)):void 0,d=y(e.code);N({audit:d,code:e.code,description:e.description,sessionHandle:e.sessionHandle,toolNames:Object.keys(o),fetchBudget:t.gatewayFetchBudgetPerExec,fetchCapable:i!==void 0});const m=Date.now(),{result:f,error:s}=await p(e.code,{setupContext:x(o,u)});return M({audit:d,fetchCount:a,outcome:s===void 0?"ok":"error",durationMs:Date.now()-m}),T({content:[{type:"text",text:JSON.stringify({result:f,error:s})}],isError:s!==void 0},n)};async function F(e,t){const r={};for(const o of Object.keys(l))C.has(o)||!await h({toolName:o,context:e}).catch(()=>!1)||(r[A(o)]=i=>w(o,i,e,t));return r}var J={[O]:v};export{J as default};

package/dist/server/plugins/mcp/codemode/tools/manage-credentials.d.ts

@@ -0,0 +1,19 @@
+import type { CallToolResult, InputRequiredResult } from '@modelcontextprotocol/server';
+import type { McpToolSchema } from '../../../../types';
+import type { McpToolContext } from '../../types.js';
+import type { KvService } from '@redocly/config';
+export type ManageApiCredentialsDeps = {
+    getClientCapabilities: () => {
+        elicitation?: {
+            url?: unknown;
+        };
+    } | undefined;
+    getKv: () => Promise<KvService>;
+};
+export declare function isManageApiCredentialsToolAvailable(context: McpToolContext): boolean;
+export declare function manageApiCredentialsSchema(context: McpToolContext): McpToolSchema;
+export declare function manageApiCredentials(context: McpToolContext, deps: ManageApiCredentialsDeps): (args: {
+    api?: unknown;
+    sessionHandle?: unknown;
+}) => Promise<CallToolResult | InputRequiredResult>;
+//# sourceMappingURL=manage-credentials.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/manage-credentials.js

@@ -0,0 +1,2 @@
+import{MANAGE_API_CREDENTIALS_TOOL_NAME as m}from"../../constants.js";import{buildUpstreamCredentialFallback as h,buildUpstreamCredentialInputRequired as f}from"../../gateway-mcp/elicitation.js";import{getCallableApis as o,isFetchCapable as g}from"../../gateway-mcp/fetch-capability.js";import{secretStore as A}from"../../gateway-mcp/secret-store.js";import{MISSING_SESSION_HANDLE_MESSAGE as v,resolveSecretSubject as b}from"../../gateway-mcp/subject.js";import{resolveUpstreamAuthScheme as y}from"../../gateway-mcp/upstream-auth-scheme.js";function k(e){return!!e.elicitationEnabled&&g(e)}function j(e){const t=o(e).map(n=>n.relativePath);return{name:m,description:["Get a secure link where the user sets, replaces, or removes the credentials this server sends to a documented API.","Call it when the user wants to change or clear an API key, or when a tool result tells you the stored credentials were rejected.","It returns a link for the user to open - never ask for the secret in the conversation and never pass it as an argument."].join(`
+`),annotations:{title:"Manage API credentials",readOnlyHint:!1,openWorldHint:!1},schema:{type:"object",required:["api"],additionalProperties:!1,properties:{api:{type:"string",description:`The API to manage credentials for.${t.length>0?` One of: ${t.join(", ")}.`:""}`,minLength:1,...t.length>0?{enum:t}:{}},sessionHandle:{type:"string",description:"Handle returned by createAnonymousSession. Required while the caller is anonymous, so the credentials are stored against the same subject the API calls use.",minLength:1}}}}}function H(e,i){return async t=>{const n=b(e.user,typeof t.sessionHandle=="string"?t.sessionHandle:void 0);if(n.kind==="invalid")return l(n.message);if(n.kind==="anonymous")return l(v);const{subject:u}=n,s=typeof t.api=="string"?t.api:"",r=o(e).find(a=>a.relativePath===s||a.name===s);if(!r){const a=o(e).map(d=>d.relativePath).join(", ");return l(`Unknown api "${s}". Credentials can only be managed for the APIs this server can call: ${a||"none"}.`)}const c=await i.getKv(),p={subject:u,baseUrl:e.baseUrl??"",target:{api:r.relativePath,name:r.name},auth:await y(e,r.relativePath),kv:c,hasExistingSecret:await A.hasSecret(c,u,r.relativePath),reason:{kind:"requested"}};return i.getClientCapabilities()?.elicitation?.url?await f(p):{content:[{type:"text",text:await h(p)}],isError:!1}}}function l(e){return{content:[{type:"text",text:e}],isError:!0}}export{k as isManageApiCredentialsToolAvailable,H as manageApiCredentials,j as manageApiCredentialsSchema};

package/dist/server/plugins/mcp/codemode/tools/tool-errors.d.ts

@@ -0,0 +1,4 @@
+export declare class UnknownToolError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=tool-errors.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/tool-errors.js

@@ -0,0 +1 @@
+class n extends Error{constructor(r){super(r),this.name="UnknownToolError"}}export{n as UnknownToolError};

package/dist/server/plugins/mcp/constants.d.ts

@@ -15,4 +15,5 @@ export declare const MAX_DOCUMENTS_PER_CATEGORY = 3;
 export declare const MCP_NOT_ALLOWED_TEMPLATE_ID = "mcp-not-allowed";
 export declare const DEFAULT_DOCS_MCP_SERVER_NAME = "Docs MCP server";
 export declare const CREATE_ANONYMOUS_SESSION_TOOL_NAME = "createAnonymousSession";
+export declare const MANAGE_API_CREDENTIALS_TOOL_NAME = "manageApiCredentials";
 //# sourceMappingURL=constants.d.ts.map

package/dist/server/plugins/mcp/constants.js

@@ -1 +1 @@
-import{LATEST_PROTOCOL_VERSION as o}from"@modelcontextprotocol/server";const E={Docs:"docs"},e={InternalError:-32603,ServerError:-32e3,InvalidRequest:-32600,MethodNotFound:-32601,InvalidParams:-32602},t=o,_=3e4,O=15e3,s=3,n="mcp-not-allowed",T="Docs MCP server",S="createAnonymousSession";export{S as CREATE_ANONYMOUS_SESSION_TOOL_NAME,_ as DEFAULT_CONNECTION_TIMEOUT_MS,T as DEFAULT_DOCS_MCP_SERVER_NAME,s as MAX_DOCUMENTS_PER_CATEGORY,n as MCP_NOT_ALLOWED_TEMPLATE_ID,t as MCP_PROTOCOL_VERSION,e as McpErrorCodes,E as McpServerType,O as SSE_KEEPALIVE_INTERVAL_MS};
+import{LATEST_PROTOCOL_VERSION as o}from"@modelcontextprotocol/server";const r={Docs:"docs"},e={InternalError:-32603,ServerError:-32e3,InvalidRequest:-32600,MethodNotFound:-32601,InvalidParams:-32602},_=o,t=3e4,O=15e3,n=3,s="mcp-not-allowed",A="Docs MCP server",T="createAnonymousSession",M="manageApiCredentials";export{T as CREATE_ANONYMOUS_SESSION_TOOL_NAME,t as DEFAULT_CONNECTION_TIMEOUT_MS,A as DEFAULT_DOCS_MCP_SERVER_NAME,M as MANAGE_API_CREDENTIALS_TOOL_NAME,n as MAX_DOCUMENTS_PER_CATEGORY,s as MCP_NOT_ALLOWED_TEMPLATE_ID,_ as MCP_PROTOCOL_VERSION,e as McpErrorCodes,r as McpServerType,O as SSE_KEEPALIVE_INTERVAL_MS};