@redocly/realm 0.138.0-next.15 → 0.138.0-next.16

package/dist/server/plugins/markdown/markdoc/resolve-raw-partials.d.ts

@@ -0,0 +1,3 @@
+import type { LifecycleContext } from '../../../types';
+export declare const resolveRawPartials: (content: string, relativePath: string, partialsFolders: string[] | undefined, context: LifecycleContext, referenceChain?: string[]) => Promise<string>;
+//# sourceMappingURL=resolve-raw-partials.d.ts.map

package/dist/server/plugins/markdown/markdoc/resolve-raw-partials.js

@@ -0,0 +1,2 @@
+import p from"node:path";import _ from"is-glob";import{slash as $}from"../../../../utils/path/slash.js";import{reporter as d}from"../../../tools/notifiers/reporter.js";import{convertGlobToRegex as h}from"../../../utils/index.js";import{formatMarkdocError as k}from"../errors.js";import{isPartial as E}from"../is-partial.js";const b=/\{% ?raw-partial file="([^"]+)" ?\/?%\}/gm,y=async(t,a,i=[],o,l=[a])=>{for(const s of i){const r=_(s)?h(s):new RegExp(`^${s}/`);await o.fs.scan(r)}const n=[],f=t.replace(b,(s,r)=>(n.push(u(s,r)),"_$redocly$"+(n.length-1)+"$")),w=await Promise.all(n);return f.replace(/_\$redocly\$(\d+)\$/g,(s,r)=>w[+r]);async function u(s,r){const e=r.startsWith("/")?r.slice(1):$(p.relative(o.fs.cwd,p.resolve(o.fs.cwd,p.dirname(a),r)));if(l.includes(e)){const c=[...l,e];return await d.panicOnBuildContentError(`Circular reference chain detected when processing raw partials: ${c.map(()=>"%rp").join(" -> ")}`,...c),""}const m=!o.fs.exists(e),g=!e.endsWith(".md")||await o.isPathIgnored(e)||!E(e,i);if(m||g){const R={type:"resolve_link",lines:[1,t.split(`
+`).length],meta:{rawLink:r,link:e},error:{id:"error",level:"error",message:m?"Raw partial file does not exist":"Could not resolve raw partial. Starting with 0.73.0 version all partials should be placed in partials folders"}};return d.reportMarkdocProblem(k(R,a,t)),""}const v=await o.fs.read(e);return await y(v,e,i,o,[...l,e])}};export{y as resolveRawPartials};

package/dist/server/plugins/markdown/markdoc/utils/deep-stringify.d.ts

@@ -0,0 +1,19 @@
+type Primitive = string | number | boolean | null | undefined;
+type StringifiedPrimitive<T> = T extends number | boolean ? string : T extends null | undefined ? T : T extends string ? string : never;
+type DeepStringified<T> = T extends Array<infer U> ? Array<DeepStringified<U>> : T extends object ? {
+    [K in keyof T]: DeepStringified<T[K]>;
+} : StringifiedPrimitive<T>;
+type StringifiableObject = {
+    [key: string]: Stringifiable;
+};
+type Stringifiable = Primitive | StringifiableObject | Stringifiable[] | unknown;
+/**
+ * Recursively converts numbers and booleans to strings within an object or array
+ * while preserving the original structure.
+ *
+ * @param value - The value to stringify
+ * @returns The transformed value with numbers and booleans converted to strings
+ */
+export declare function deepStringify<T extends Stringifiable>(value: T): DeepStringified<T>;
+export {};
+//# sourceMappingURL=deep-stringify.d.ts.map

package/dist/server/plugins/markdown/markdoc/utils/deep-stringify.js

@@ -0,0 +1 @@
+function e(t){return t===null||typeof t!="object"?!1:!Array.isArray(t)&&Object.getPrototypeOf(t)===Object.prototype}function n(t){if(t==null)return t;if(Array.isArray(t))return t.map(n);if(typeof t!="object")return typeof t=="number"||typeof t=="boolean"?String(t):t;if(t instanceof Date)return t.toISOString();if(!e(t))return String(t);const r={};for(const[i,o]of Object.entries(t))r[i]=n(o);return r}export{n as deepStringify};

package/dist/server/plugins/markdown/markdown-frontmatter-loader.d.ts

@@ -0,0 +1,3 @@
+import type { LoaderFn } from '../../types';
+export declare const markdownFrontmatterLoader: LoaderFn;
+//# sourceMappingURL=markdown-frontmatter-loader.d.ts.map

package/dist/server/plugins/markdown/markdown-frontmatter-loader.js

@@ -0,0 +1 @@
+import{extractFrontmatter as m}from"./extract-frontmatter.js";import{ensureFrontmatterThemeCompatibility as f}from"../ensure-frontmatter-theme-compatibility.js";const w=async(r,t,a)=>{const n=await t.fs.read(r),{frontmatter:e,frontmatterError:o}=m(n);return o&&a(new Error(o)),{frontmatter:await f(e,r,t.fs)}};export{w as markdownFrontmatterLoader};

package/dist/server/plugins/markdown/markdown-static-data-loader.d.ts

@@ -0,0 +1,3 @@
+import type { GetStaticDataContext, LifecycleContext, RouteDetails, MdPageStaticData, FileInfo } from '../../types';
+export declare function markdownStaticDataLoader(record: FileInfo, route: RouteDetails, context: LifecycleContext, frontmatter: Record<string, any>, actions: GetStaticDataContext): Promise<MdPageStaticData>;
+//# sourceMappingURL=markdown-static-data-loader.d.ts.map

package/dist/server/plugins/markdown/markdown-static-data-loader.js

@@ -0,0 +1 @@
+import D from"path";import{REDOCLY_TEAMS_RBAC as v,REDOCLY_ROUTE_RBAC as A}from"@redocly/config";import{removeTrailingSlash as M}from"../../../utils/url/remove-trailing-slash.js";import{addLeadingSlash as N}from"../../../utils/url/add-leading-slash.js";import{shaHexShort as E}from"../../utils/crypto/sha-hex-short.js";import{isDefined as I}from"../../../utils/guards/is-defined.js";import{resolveFrontmatterKeys as L}from"../resolve-frontmatter-keys.js";import{resolveItem as _}from"../nav-utils.js";const R=new WeakMap;async function j(o,i,s,e,a){const d=await s.getConfig(),{ast:l,compoundHash:n,info:g}=await a.parseMarkdoc({input:o,context:s}),r={...d.markdown?.editPage,...e.markdown?.editPage},t=i.fsPath!=null?s.fs.getFileInfo(i.fsPath):null,f=!r?.hide&&r?.baseUrl?{to:M(r.baseUrl)+N(t?.realRelativePath||i.fsPath||"")}:void 0,w={...d.feedback,...e.feedback},m=e.feedback?{type:w.type||"sentiment",settings:w.settings||{},hide:e.feedback?.hide}:void 0;let h;Array.isArray(e.banner)&&(h=(await Promise.all(e.banner.map(async(B,O)=>{const{content:k,...b}=B;if(!k)return;const{ast:T}=await a.parseMarkdoc({input:{content:k,relativePath:o.relativePath,isVirtual:o.isVirtual},context:s,resource:`${o.relativePath}#banner${O}`});return{...b,...b.rbac?{[v]:b.rbac}:{},ast:JSON.stringify(T),hash:E(k)}}))).filter(I));let y=R.get(l),c=y?.ast;(!c||y?.compoundHash!==n)&&(c=JSON.stringify(l),R.set(l,{ast:c,compoundHash:n}));let p;e.navigation&&(p={...e.navigation,nextButton:await S(e.navigation.nextButton,i,a,s),previousButton:await S(e.navigation.previousButton,i,a,s)});const u=e?.seo?await L(e.seo,["image"],i.fsPath||"",a,s):void 0,P=g.tagList;Array.isArray(P)&&P.includes("code-walkthrough")&&(e.markdown=e.markdown||{},e.markdown.toc={hide:!0},e.footer=e.footer||{},e.footer={hide:!0});const C=e?.seo?.title||await i.getNavText?.();return{ast:c,frontmatter:await L({...e,...m!==void 0?{feedback:m}:{},...u!==void 0?{seo:u}:{},...p!==void 0?{navigation:p}:{},...h!==void 0?{banner:h}:{}},d.markdown?.frontMatterKeysToResolve||["image","links"],i.fsPath||"",a,s),editPage:f,props:{metadata:{markdoc:{tagList:g.tagList}},seo:{...u,...C?{title:C}:{}}},[v]:i[v],[A]:i[A]}}async function S(o,i,s,e){if(!o||typeof o!="object")return;let a=o,d,l;if("page"in a&&typeof a.page=="string"){const{page:t,...f}=a;a=f,d=t}if("label"in a&&typeof a.label=="string"){const{label:t,...f}=a;a=f,l=t}let n;if(d){const t=await _({page:d},i.fsPath?D.dirname(i.fsPath):".",s,e,{navFile:i.fsPath||""});n=Array.isArray(t)?t[0]:t,n=n?.type!=="error"?n:void 0}const g=n?.routeSlug,r=l??n?.label;return{...a,label:r,link:g}}export{j as markdownStaticDataLoader};

package/dist/server/plugins/markdown/read-file-content.d.ts

@@ -0,0 +1,3 @@
+import type { ContentFs } from '../../fs/content-fs';
+export declare function readFileContent(filePath: string, fs: ContentFs): Promise<string | null>;
+//# sourceMappingURL=read-file-content.d.ts.map

package/dist/server/plugins/markdown/read-file-content.js

@@ -0,0 +1 @@
+import{reporter as t}from"../../tools/notifiers/reporter.js";async function o(r,n){return await n.exists(r)?n.read(r):(await t.panicOnBuildContentError(`File ${r} does not exist`),null)}export{o as readFileContent};

package/dist/server/plugins/markdown/resolve-path-in-markdown.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Resolves the relative path to a file referenced in a markdown file.
+ *
+ * @param filePath - The path to the file as used in the markdown file.
+ * @param pageRelativePath - The relative path from the `contentDir` to the markdown file
+ *                           that contains the `filePath` reference.
+ * @param contentDir - Project content directory.
+ * @returns The resolved relative path from the `contentDir` to the referenced file.
+ *          Absolute paths are treated as relative to `contentDir`, and relative paths
+ *          are resolved based on the location of the markdown file.
+ * @example
+ * // Example 1: Resolving an absolute file path
+ * const filePath = '/images/logo.png';
+ * const contentDir = '/project/content';
+ * const pageRelativePath = 'docs/page.md';
+ * const result = resolvePathInMd(filePath, pageRelativePath, contentDir);
+ * console.log(result); // 'images/logo.png'
+ *
+ * @example
+ * // Example 2: Resolving a relative file path
+ * const filePath = './assets/image.png';
+ * const contentDir = '/project/content';
+ * const pageRelativePath = 'docs/page.md';
+ * const result = resolvePathInMd(filePath, pageRelativePath, contentDir);
+ * console.log(result); // 'docs/assets/image.png'
+ *
+ * @example
+ * // Example 3: Resolving a file path in a sibling directory
+ * const filePath = '../shared/config.json';
+ * const contentDir = '/project/content';
+ * const pageRelativePath = 'docs/page.md';
+ * const result = resolvePathInMd(filePath, pageRelativePath, contentDir);
+ * console.log(result); // 'shared/config.json'
+ */
+export declare function resolvePathInMarkdown(filePath: string, pageRelativePath: string, contentDir: string): string;
+//# sourceMappingURL=resolve-path-in-markdown.d.ts.map

package/dist/server/plugins/markdown/resolve-path-in-markdown.js

@@ -0,0 +1 @@
+import t from"node:path";import{slash as o}from"../../../utils/path/slash.js";function m(r,a,e){return r.startsWith("/")?r.slice(1):o(t.relative(e,t.resolve(e,t.dirname(a),r)))}export{m as resolvePathInMarkdown};

package/dist/server/plugins/markdown/runtime-transform.d.ts

@@ -0,0 +1,12 @@
+import type { Node } from '@markdoc/markdoc';
+import type { MdOptions } from '@redocly/config';
+export declare function transformMdAst(ast: Node, config: MdOptions, serverOutDir: string): Promise<{
+    headings: {
+        value: string;
+        id: string;
+        depth: number;
+    }[];
+    renderableAst: import("@markdoc/markdoc").RenderableTreeNode;
+    pageProps: any;
+}>;
+//# sourceMappingURL=runtime-transform.d.ts.map

package/dist/server/plugins/markdown/runtime-transform.js

@@ -0,0 +1 @@
+import c from"@markdoc/markdoc";import{isTag as b}from"../../../markdoc/helpers/guards/is-tag.js";import{slugger as f}from"../../utils/index.js";import{getMarkdocOptions as l}from"./markdoc/markdoc-options.js";import{visit as h,getHeadingData as k,getNumberedItemHeadingData as D}from"./markdoc/plugins/utils.js";import{renderDiagramsWithVariants as H}from"./markdoc/plugins/render-diagrams.js";import{deepStringify as v}from"./markdoc/utils/deep-stringify.js";import{stringifyTagChildrenObjects as y}from"./utils/stringify-tag-children-objects.js";async function S(d,e,p){const g=await l(p),i=[],a=[],o=v(e.variables?.pageProps),{headers:T,...u}=e.variables||{};f.reset();const m=c.transform(d,{...g,...e,variables:{...u,pageProps:o}});let n=0;h(m,r=>{if(b(r)){switch(r.name){case"Heading":{r.attributes.__idx=n,n++;const t=k(r);t&&i.push(t);break}case"NumberedItem":{const t=D(r);t&&i.push(t);break}case"Diagram":a.push({tag:r,input:{type:r.attributes.diagramType,source:r.attributes.diagramSource}});break}y(r)}});const s=await H(a.map(r=>r.input));for(let r=0;r<a.length;r++)a[r].tag.attributes.diagramError=s[r].error,a[r].tag.attributes.diagramHtml=s[r].light,a[r].tag.attributes.diagramHtmlDark=s[r].dark;return{headings:i,renderableAst:m,pageProps:o}}export{S as transformMdAst};

package/dist/server/plugins/markdown/search/create-render-tag-fn.d.ts

@@ -0,0 +1,5 @@
+import type { MarkdocTagSchema } from '@redocly/theme/markdoc/tags/types';
+import type { TFunction } from '@redocly/theme/core/types';
+import type { RenderTagFn } from '../../../types/plugins/markdown';
+export declare function createRenderTagFn(markdocTags: Record<string, MarkdocTagSchema> | undefined, locale: string, translate: TFunction): RenderTagFn;
+//# sourceMappingURL=create-render-tag-fn.d.ts.map

package/dist/server/plugins/markdown/search/create-render-tag-fn.js

@@ -0,0 +1 @@
+function a(e,n,t){return(r,u)=>{if(r.tag)return e?.[r.tag]?.renderForLlms?.(r,{...u,locale:n,translate:t})}}export{a as createRenderTagFn};

package/dist/server/plugins/markdown/search/get-ai-search-documents.d.ts

@@ -0,0 +1,5 @@
+import type { SearchFacet } from '@redocly/theme/core/types';
+import type { PageRouteDetails, MdPageStaticData, AfterRoutesCreatedActions, AfterRoutesCreatedLifecycleContext } from '../../../types';
+import type { AiDocumentsStore } from '../../../plugins/search/types.js';
+export declare const getAiDocumentsStore: (getSearchFacets: () => Map<string, SearchFacet>, frontmatter: MdPageStaticData['frontmatter']) => (route: PageRouteDetails, staticData: MdPageStaticData, _context: AfterRoutesCreatedLifecycleContext, actions: AfterRoutesCreatedActions) => Promise<AiDocumentsStore | undefined>;
+//# sourceMappingURL=get-ai-search-documents.d.ts.map

package/dist/server/plugins/markdown/search/get-ai-search-documents.js

@@ -0,0 +1,9 @@
+import M from"@markdoc/markdoc";import D from"node:path";import{AI_SEARCH_CHUNK_SIZE as R,AI_SEARCH_DOCUMENT_CHUNK_SIZE as v}from"../../../constants/plugins/search.js";import{slugger as I}from"../../../../utils/slugger.js";import{joinSectionContent as N}from"./join-section-content.js";import{toMarkdown as P}from"./to-markdown.js";import{AstToSearchNodeTransformer as w}from"./walk-sections.js";import{createRenderTagFn as x}from"./create-render-tag-fn.js";import{getBuildTranslateContext as K}from"../../../utils/l10n/get-build-translate-context.js";import{getLocaleFromRelativePath as L}from"../../../fs/utils/get-locale-from-relative-path.js";import{HeadingNode as b}from"./nodes/heading-node.js";import{extractDocumentSearchFacets as U}from"./search-facets.js";import{formatDocumentMetadata as y}from"../../search/utils.js";import{TagNode as H}from"./nodes/tag-node.js";import{MARKDOC_PARTIALS_DATA_KEY as O}from"../../../constants/common.js";const j=Symbol(),at=(n,o)=>async(e,r,i,c)=>{if(o?.excludeFromSearch)return;I.reset();const l=await e.getNavText?.()||D.basename(e.fsPath),f=M.Ast.fromJSON(r.ast),{locale:g,translate:A}=await K(e.slug,c.getGlobalData?.().l10n),s=new w({partials:c.getGlobalConfig(O)||{},renderTag:x(c.markdocOptions.tags,g,A),getInnerContent:P,ast:f,skipConditionals:!0}),d=Array.from(s.transform());return{async getLLMsTxts(){const u=o?.seo,t=u&&typeof u=="object"&&"description"in u?String(u.description):void 0,a=N(d);return[{title:l,description:t,slug:e.slug,fsPath:e.fsPath,content:a,includeInLLMsTxt:!0}]},async getSearchDocuments(){return F(e,d,n,l)}}};function F(n,o,e,r){const i=n.slug,c=new Map,l=n.metadata||{},f=U(l,e),g=y(l),A=g?`Metadata:
+${g}
+`:"";let s=[];for(const t of o)if(t instanceof b){s.splice(t.attributes.level-1,6);const a=t.attributes.level>2,m=s[s.length-1]?.title,T=s[s.length-1]?.url,C=a&&m?m:W(r,t),S=a&&T?T:t.getUrl(i),p={title:C,content:"",url:S,level:t.attributes.level,toc:s.map(E=>h(E.section)).join(`
+`)};(t.attributes.level>1||h(t)!==r)&&(p.content+=p.content?`
+`:"",p.content+=t.content.trimEnd()),c.set(t.id,p),s.push({section:t,title:C,url:S})}else if(t instanceof H)c.set(t.id,{title:t.content,content:t.content,url:t.getUrl(i),level:t.attributes.level+1,toc:s.map(a=>h(a.section)).concat(t.content).join(`
+`)});else{const a=t.parentNode?.id??j,m=c.get(a)??{title:r,content:"",url:i,level:1/0,toc:""};m.content+=m.content?`
+`:"",m.content+=t.content.trimEnd(),c.set(a,m)}const d=$(Array.from(c.values())),u=L(n.fsPath);return d.filter(t=>t.content).map(t=>({title:t.title,url:t.url,content:[A,t.toc||`# ${r}`,t.content].filter(Boolean).join(`
+`),fsPath:n.fsPath,locale:u,product:n.product?.name,facets:f}))}function _(n){return n.length/4}function $(n){if(n.length===0)return[];const o=[];let e=n[0];for(let r=1;r<n.length;r++){const i=n[r],c=_(e.content),l=_(i.content),f=r===n.length-1;l<R&&(c<v||f)&&i.level>e.level?e.content+=`
+`+i.content:(o.push(e),e=i)}return o.push(e),o}const k=String.raw`\((?:[^()]|\([^()]*\))*\)`,G=new RegExp(String.raw`!\[[^\]]*\]`+k,"g"),z=new RegExp(String.raw`\[(?<!\[[^\]()]*?\[)([^\]]*)\]`+k,"g");function W(n,o){const e=h(o);return o.content===n||!e?n:`${n} \u2192 ${e}`}function h(n){return B(n.content.replace(/^#+/,""))}function B(n){return n.replace(G,"").replace(z,"$1").trim()}export{at as getAiDocumentsStore};

package/dist/server/plugins/markdown/search/get-search-documents.d.ts

@@ -0,0 +1,9 @@
+import { type RbacScopeItems } from '@redocly/config';
+import type { FrontmatterKeywords } from '../../../types/index.js';
+import type { AstToSearchNodeTransformer } from './walk-sections.js';
+import { MdSearchDocument } from './md-search-document.js';
+export declare function getSearchDocuments(searchTransformer: AstToSearchNodeTransformer, slug: string, pageTitle: string, routePermission?: RbacScopeItems, routeRbac?: {
+    slug?: string;
+    fsPath?: string;
+}, facets?: Record<string, string>, keywords?: FrontmatterKeywords): MdSearchDocument[];
+//# sourceMappingURL=get-search-documents.d.ts.map

package/dist/server/plugins/markdown/search/get-search-documents.js

@@ -0,0 +1,2 @@
+import{REDOCLY_TEAMS_RBAC as $}from"@redocly/config";import{SEARCH_DOCUMENT_METADATA_KEY as g}from"../../../constants/plugins/search.js";import{slugger as x}from"../../../../utils/slugger.js";import{TagNode as M}from"./nodes/tag-node.js";import{TextNode as U}from"./nodes/text-node.js";import{MdSearchDocument as D}from"./md-search-document.js";import{HeadingNode as N}from"./nodes/heading-node.js";const C=Symbol();function H(r,e){if(!r)return e;if(!e)return r;const d=[" ",`
+`,"	"],u=d.some(o=>r.endsWith(o)),s=d.some(o=>e.startsWith(o));return r+(!u&&!s?" ":"")+e}function Y(r,e,d,u,s,a={},o){const h=new Map(Array.from({length:6},(t,c)=>[c,""])),i=new Map;let S=null,_=0;u=u??{},x.reset();for(const t of r.transform()){const c=t.getUrl(e),f={...u};for(const n of t.rbacTeams??[])f[n.toLowerCase()]="read";if(t instanceof U){const n=t.parentNode?.id,m=n?`${c}#${n}`:C,A=i.get(m),l=A??new D(d,e,[],a,f,s),E=Object.keys(l[$]??{});if(A&&t.rbacTeams&&t.rbacTeams.length>0&&(E.length===0||!E.every(p=>(t.rbacTeams||[]).includes(p)))){const p=new D(A?.title??d,c,t.getPath(h),a,f,s);p.text=t.content,i.set(`${c}#rbac-text-${_++}`,p)}else l.text=H(l.text,t.content),l.facets=a,i.set(m,l);continue}if(t instanceof M){const n=`${c}#${t.id}`,m=new D(t.content,t.getUrl(e),t.getPath(h),a,f,s);i.set(n,m);continue}if(t instanceof N){h.set(t.attributes.level,t.content);const n=new D(t.content,t.getUrl(e),t.getPath(h),a,f,s),m=`${c}#${t.id}`;i.set(m,n),S===null&&(S=n)}}const T=Array.from(i.values()),b=S??T[0];if(b&&o?.includes&&(b[g].curated=!0,b[g].includes=o.includes),o?.excludes)for(const t of T)t[g].curated=!0,t[g].excludes=o.excludes;return T}export{Y as getSearchDocuments};

package/dist/server/plugins/markdown/search/join-section-content.d.ts

@@ -0,0 +1,3 @@
+import type { SearchNode } from './nodes/types';
+export declare function joinSectionContent(sections: SearchNode[]): string;
+//# sourceMappingURL=join-section-content.d.ts.map

package/dist/server/plugins/markdown/search/join-section-content.js

@@ -0,0 +1,2 @@
+function o(t){return t.map(n=>n.content.trimStart()).filter(Boolean).join(`
+`).trim()}export{o as joinSectionContent};

package/dist/server/plugins/markdown/search/md-search-document.d.ts

@@ -0,0 +1,24 @@
+import { REDOCLY_ROUTE_RBAC, REDOCLY_TEAMS_RBAC } from '@redocly/config';
+import type { RbacScopeItems } from '@redocly/config';
+import type { SearchDocument, SearchDocumentMetadata } from '../../../types';
+import { SEARCH_DOCUMENT_METADATA_KEY } from '../../../constants/plugins/search.js';
+export declare class MdSearchDocument implements SearchDocument {
+    title: string;
+    url: string;
+    path: string[];
+    facets: Record<string, string>;
+    text: string;
+    id: string;
+    [REDOCLY_TEAMS_RBAC]: RbacScopeItems | undefined;
+    [REDOCLY_ROUTE_RBAC]?: {
+        slug?: string;
+        fsPath?: string;
+    };
+    tags: string[];
+    [SEARCH_DOCUMENT_METADATA_KEY]: SearchDocumentMetadata;
+    constructor(title: string, url: string, path: string[], facets: Record<string, string>, permission?: RbacScopeItems, routeInfo?: {
+        slug?: string;
+        fsPath?: string;
+    });
+}
+//# sourceMappingURL=md-search-document.d.ts.map

package/dist/server/plugins/markdown/search/md-search-document.js

@@ -0,0 +1 @@
+import{REDOCLY_ROUTE_RBAC as i,REDOCLY_TEAMS_RBAC as h}from"@redocly/config";import{SEARCH_DOCUMENT_METADATA_KEY as r}from"../../../constants/plugins/search.js";class R{title;url;path;facets;text="";id;[h];[i];tags=[];[r];constructor(o,s,E,t,a,e){this.title=o,this.url=s,this.path=E,this.facets=t,this.id=s,this[h]=a,this[i]=e,Object.keys(t).forEach(c=>{this.tags=[...this.tags,t[c]]}),this[r]={}}}export{R as MdSearchDocument};

package/dist/server/plugins/markdown/search/nodes/heading-node.d.ts

@@ -0,0 +1,9 @@
+import { SectionNode, type SectionNodeParams } from './section-node.js';
+declare const HeadingNode_base: typeof SectionNode;
+export declare class HeadingNode extends HeadingNode_base {
+    constructor(params: Omit<SectionNodeParams, 'parentNode'>);
+    getUrl(slug: string): string;
+    getPath(headings: Map<number, string>): string[];
+}
+export {};
+//# sourceMappingURL=heading-node.d.ts.map

package/dist/server/plugins/markdown/search/nodes/heading-node.js

@@ -0,0 +1 @@
+import{SectionNode as o,WithSlugId as r}from"./section-node.js";class s extends r(o){constructor(e){super({...e,parentNode:null})}getUrl(e){const t=this.node.attributes.id??this.id;return`${e}#${t}`}getPath(e){return[...e.values()].slice(0,this.node.attributes.level+1).filter(Boolean)}}export{s as HeadingNode};

package/dist/server/plugins/markdown/search/nodes/section-node.d.ts

@@ -0,0 +1,23 @@
+import type { Node } from '@markdoc/markdoc';
+import type { SearchParentNode } from './types.js';
+export type SectionNodeParams = {
+    node: Node;
+    content: string;
+    parentNode: SearchParentNode;
+    rbacTeams?: string[];
+};
+export declare class SectionNode {
+    #private;
+    constructor(params: SectionNodeParams);
+    get attributes(): Node['attributes'];
+    get content(): string;
+    get node(): Node;
+    get id(): string | number;
+    get parentNode(): SearchParentNode;
+    get rbacTeams(): string[] | undefined;
+}
+type Constructor<T = any> = new (...args: any[]) => T;
+export declare function WithCounterId<TBase extends Constructor>(Base: TBase): TBase;
+export declare function WithSlugId<TBase extends Constructor>(Base: TBase): TBase;
+export {};
+//# sourceMappingURL=section-node.d.ts.map

package/dist/server/plugins/markdown/search/nodes/section-node.js

@@ -0,0 +1 @@
+import{getInnerText as o}from"../../../../../markdoc/helpers/get-inner-text.js";import{slugger as d}from"../../../../../utils/slugger.js";class c{#t;#e;#r;#n;constructor(t){const{node:r,content:n,rbacTeams:i,parentNode:s}=t;this.#t=r,this.#e=n,this.#r=s,this.#n=i}get attributes(){return this.#t.attributes}get content(){return this.#e}get node(){return this.#t}get id(){throw new Error("SectionNode needs an id mixin applied")}get parentNode(){return this.#r}get rbacTeams(){return this.#n}}function a(e){let t=0;return class extends e{#t;get id(){return this.#t!==void 0?this.#t:(this.#t=++t,this.#t)}}}function g(e){return class extends e{#t;get id(){if(this.#t!==void 0)return this.#t;const t=this;return this.#t=d.slug(o(t.node.children),{replaceDots:!0,replaceSlashes:!0}),this.#t}}}export{c as SectionNode,a as WithCounterId,g as WithSlugId};

package/dist/server/plugins/markdown/search/nodes/tag-node.d.ts

@@ -0,0 +1,10 @@
+import { SectionNode, type SectionNodeParams } from './section-node.js';
+export declare const TAG_TITLE_ATTRIBUTES: readonly ['title', 'name', 'label'];
+declare const TagNode_base: typeof SectionNode;
+export declare class TagNode extends TagNode_base {
+    constructor(params: SectionNodeParams);
+    getUrl(slug: string): string;
+    getPath(headings: Map<number, string>): string[];
+}
+export {};
+//# sourceMappingURL=tag-node.d.ts.map

package/dist/server/plugins/markdown/search/nodes/tag-node.js

@@ -0,0 +1 @@
+import{SectionNode as r,WithCounterId as o}from"./section-node.js";const i=["title","name","label"];class s extends o(r){constructor(t){super(t)}getUrl(t){return this.parentNode?.getUrl(t)??t}getPath(t){let e=this.parentNode?.getPath(t);return e||(e=this.content?[this.content]:[]),e}}export{i as TAG_TITLE_ATTRIBUTES,s as TagNode};

package/dist/server/plugins/markdown/search/nodes/text-node.d.ts

@@ -0,0 +1,7 @@
+import { SectionNode, type SectionNodeParams } from './section-node.js';
+export declare class TextNode extends SectionNode {
+    constructor(params: SectionNodeParams);
+    getPath(headings: Map<number, string>): string[];
+    getUrl(slug: string): string;
+}
+//# sourceMappingURL=text-node.d.ts.map

package/dist/server/plugins/markdown/search/nodes/text-node.js

@@ -0,0 +1 @@
+import{SectionNode as e}from"./section-node.js";class n extends e{constructor(t){super(t)}getPath(t){return this.parentNode?.getPath(t)??[this.content]}getUrl(t){return this.parentNode?.getUrl(t)??t}}export{n as TextNode};

package/dist/server/plugins/markdown/search/nodes/types.d.ts

@@ -0,0 +1,6 @@
+import type { TagNode } from './tag-node.js';
+import type { HeadingNode } from './heading-node.js';
+import type { TextNode } from './text-node.js';
+export type SearchParentNode = TagNode | HeadingNode | null;
+export type SearchNode = TagNode | HeadingNode | TextNode;
+//# sourceMappingURL=types.d.ts.map

package/dist/server/plugins/markdown/search/search-facets.d.ts

@@ -0,0 +1,10 @@
+import type { SearchFacet } from '@redocly/theme/core/types';
+export declare function setDocumentSearchFacets(documentSearchFacets: {
+    [key: string]: string;
+}, getSearchFacets: () => Map<string, SearchFacet>, setSearchFacets: (searchFacets: Map<string, SearchFacet>) => void): void;
+export declare function extractDocumentSearchFacets(metadata: {
+    [key: string]: any;
+}, getSearchFacets: () => Map<string, SearchFacet>): {
+    [key: string]: string;
+};
+//# sourceMappingURL=search-facets.d.ts.map

package/dist/server/plugins/markdown/search/search-facets.js

@@ -0,0 +1 @@
+import{SEARCH_GROUP_FACET_FIELD as f}from"../../../../constants/common.js";import{SEARCH_GROUP_NAME_DOCUMENTATION as u}from"../../../constants/plugins/search.js";function S(t,o,e){const c=o();for(const[r,n]of Object.entries(t)){const s=c.get(r);if(s){const a=new Set(s.values??[]).add(n);s.values=Array.from(a)}}e(c)}function h(t,o){const e={[f]:u};if(!t)return e;const c=o();for(const[r,n]of Object.entries(t))c.has(r)&&(e[r]=String(n));return e}export{h as extractDocumentSearchFacets,S as setDocumentSearchFacets};

package/dist/server/plugins/markdown/search/search-resolver.d.ts

@@ -0,0 +1,4 @@
+import type { AfterRoutesCreatedActions, MdPageStaticData, PageRouteDetails, SearchDocument } from '../../../types';
+import type { SearchFacet } from '@redocly/theme/core/types';
+export declare function searchResolver(frontmatter: Record<string, any>, relativePath: string, getSearchFacets: () => Map<string, SearchFacet>, setSearchFacets: (searchFacets: Map<string, SearchFacet>) => void): (route: PageRouteDetails, staticData: MdPageStaticData, actions: AfterRoutesCreatedActions) => Promise<SearchDocument[]>;
+//# sourceMappingURL=search-resolver.d.ts.map

package/dist/server/plugins/markdown/search/search-resolver.js

@@ -0,0 +1 @@
+import p from"@markdoc/markdoc";import{REDOCLY_ROUTE_RBAC as l,REDOCLY_TEAMS_RBAC as A}from"@redocly/config";import{getInnerText as T}from"../../../../markdoc/helpers/get-inner-text.js";import{getSearchDocuments as h}from"./get-search-documents.js";import{AstToSearchNodeTransformer as R}from"./walk-sections.js";import{setDocumentSearchFacets as S,extractDocumentSearchFacets as C}from"./search-facets.js";import{MARKDOC_PARTIALS_DATA_KEY as D}from"../../../constants/common.js";import{normalizeFrontmatterKeywords as _}from"../../helpers/normalize-frontmatter-keywords.js";function K(e,m,o,c){return async(t,r,a)=>{if(e?.excludeFromSearch)return[];const i=p.Ast.fromJSON(r.ast),u=new R({ast:i,getInnerContent:T,partials:a.getGlobalConfig(D)||{},indexPromptTitles:!0}),f=t.metadata||{},n=C(f,o);S(n,o,c);const d=e?.seo?.title||m,{result:s}=_(e?.keywords);return h(u,t.slug,d,r[A],r[l],n,s||void 0)}}export{K as searchResolver};

package/dist/server/plugins/markdown/search/to-markdown.d.ts

@@ -0,0 +1,4 @@
+import type { Function, Node, RenderableTreeNode, Variable } from '@markdoc/markdoc';
+import type { GetInnerContentFnOptions } from '../../../../types/index.js';
+export declare function toMarkdown(children: (RenderableTreeNode | Node | Variable | Function)[], options?: GetInnerContentFnOptions): string;
+//# sourceMappingURL=to-markdown.d.ts.map

package/dist/server/plugins/markdown/search/to-markdown.js

@@ -0,0 +1,29 @@
+import{isPrimitive as m}from"../../../../utils/guards/is-primitive.js";import{getNodeAttribute as c}from"../../../../markdoc/helpers/get-node-attribute.js";import{getVariable as f}from"../../../../markdoc/helpers/get-variable.js";import{isTag as $}from"../../../../markdoc/helpers/guards/is-tag.js";import{isNode as p}from"../../../../markdoc/helpers/guards/is-node.js";import{isConditionalNode as g}from"../../../../markdoc/helpers/guards/is-conditional-node.js";import{isVariable as k}from"../../../../markdoc/helpers/guards/is-variable.js";import{isExampleNode as b}from"../../../../markdoc/helpers/guards/is-example-node.js";import{isFenceNode as T}from"../../../../markdoc/helpers/guards/is-fence-node.js";import{isPromptNode as j}from"../../../../markdoc/helpers/guards/is-prompt-node.js";function s(a,r={}){const t=[];for(const e of a){if(m(e)){const n=r.isTrim?d(String(e)):String(e);n&&t.push(n)}else if(p(e))switch(e.type){case"text":t.push(s([c(e,"content")],r));break;case"code":t.push(`\`${s([c(e,"content")],r)}\``);break;case"blockquote":t.push(`> ${s(e.children,r)}
+`);break;case"fence":{const n=c(e,"process")===!1;t.push(u(e,r,n));break}case"list":{const n=c(e,"ordered")||!1,i=c(e,"marker"),l=e.children.map((o,h)=>`${" ".repeat((r?.indent??0)*2)}${n?h+1:""}${i} ${s([o],{...r??{},indent:(r?.indent??0)+1})}`);t.push(`${l.join("")}
+`);break}case"item":t.push(e.children.map(n=>`${s([n],r).trimEnd()}
+`).join(""));break;case"thead":{const n=e.children.map(i=>s([i],r));t.push(`${n}| ${" --- |".repeat(e.children?.[0]?.children.length)}
+`);break}case"tr":{const n=e.children.map(i=>s([i],r));t.push(`| ${n.join(" | ")} |
+`);break}case"em":t.push(`*${s(e.children,r)}*`);break;case"strong":t.push(`**${s(e.children,r)}**`);break;case"softbreak":case"hardbreak":t.push(`
+`);break;case"hr":t.push(`
+
+---
+
+`);break;case"heading":{const n=c(e,"level")??0;t.push(`${"#".repeat(n)} ${s(e.children,r)}
+`);break}case"image":{const n=c(e,"alt")||"",i=c(e,"src")||"";t.push(`![${n}](${i})`);break}case"link":{const n=c(e,"href")||"";t.push(`[${s(e.children,r)}](${n})`);break}case"paragraph":case"table":t.push(`${s(e.children,r)}
+`);break;case"tag":if(g(e)&&r.skipConditionals||j(e))continue;if(b(e)){t.push(...e.children.map(n=>{if(T(n)){const i=c(n,"process")!==!0;return u(n,r,i)}return s([n],r)}));continue}if(e.tag==="code-snippet"){const n=c(e,"rawContent");if(n){const i=c(e,"language"),l=c(e,"title"),h=`
+\`\`\`${`${i||""}${l?`${i?" ":""}${l}`:""}`}
+${n.trimEnd()}
+\`\`\`
+`;t.push(h)}continue}if(e.tag==="json-example"){const n=S(e);n&&t.push(n);continue}if(e.tag==="json-schema"){const n=v(e);n&&t.push(n);continue}if(r.renderTag){const n=r.renderTag(e,{getBody:()=>s(e.children,r)});if(n!==void 0){t.push(n);continue}}t.push(`${s(e.children,r)}`);break;default:t.push(s(e.children,r));break}else $(e)&&t.push(s(e.children,r));k(e)&&t.push(s([f(e,r.variables)],r))}return r.isTrim?d(t.map(e=>d(e)).join("")):t.join("")}function d(a){return a.replace(/^[ \t\r\f]+|(?<![ \t\r\f])[ \t\r\f]+$/g,"")}function u(a,r={},t=!1){const e=c(a,"title"),n=c(a,"language"),i=`${n||""}${e?`${n?" ":""}${e}`:""}`,l=t?(c(a,"content")||"").trimEnd():s(a.children,r).trimEnd();return`
+\`\`\`${i}
+${l}
+\`\`\`
+`}function S(a){const r=c(a,"json")??c(a,"valueResolved")??c(a,"schemaResolved"),t=c(a,"title");return r===null?null:`
+\`\`\`${`json${t?` ${t}`:""}`}
+${JSON.stringify(r,null,2)}
+\`\`\`
+`}function v(a){const r=c(a,"schemaResolved");if(r===null)return null;const t=c(a,"title"),{components:e,openapi:n,...i}=r,{__root:l,...o}=e?.schemas||{},h=l?{...l,...Object.keys(o).length>0?{components:{schemas:o}}:{},...i}:r;return`
+\`\`\`${`json${t?` ${t}`:""}`}
+${JSON.stringify(h,null,2)}
+\`\`\`
+`}export{s as toMarkdown};

package/dist/server/plugins/markdown/search/walk-sections.d.ts

@@ -0,0 +1,20 @@
+import type { Node } from '@markdoc/markdoc';
+import type { GetInnerContentFn } from '../../../../types/index.js';
+import type { SearchNode } from './nodes/types.js';
+import type { RenderTagFn } from '../../../types/plugins/markdown.js';
+type Params = {
+    ast: Node;
+    partials: Record<string, Node>;
+    skipConditionals?: boolean;
+    getInnerContent: GetInnerContentFn;
+    renderTag?: RenderTagFn;
+    /** Emits the prompt title, never the prompt body. Only the full-text search index takes it. */
+    indexPromptTitles?: boolean;
+};
+export declare class AstToSearchNodeTransformer {
+    #private;
+    constructor({ ast, partials, skipConditionals, getInnerContent, renderTag, indexPromptTitles, }: Params);
+    transform(): Generator<SearchNode, void, any>;
+}
+export {};
+//# sourceMappingURL=walk-sections.d.ts.map

package/dist/server/plugins/markdown/search/walk-sections.js

@@ -0,0 +1,3 @@
+import{PROMPT_TAG as a}from"@redocly/theme/core/constants";import{logger as w}from"../../../tools/notifiers/logger.js";import{isNode as p}from"../../../../markdoc/helpers/guards/is-node.js";import{isConditionalNode as N}from"../../../../markdoc/helpers/guards/is-conditional-node.js";import{isContentNode as m}from"../../../../markdoc/helpers/guards/is-content-node.js";import{getNodeAttribute as f}from"../../../../markdoc/helpers/get-node-attribute.js";import{extractRbacFromCondition as b}from"../../../../markdoc/helpers/extract-rbac-from-condition-node.js";import{TextNode as n}from"./nodes/text-node.js";import{TAG_TITLE_ATTRIBUTES as g,TagNode as u}from"./nodes/tag-node.js";import{HeadingNode as y}from"./nodes/heading-node.js";import{joinSectionContent as d}from"./join-section-content.js";class G{#r;#e;#o;#s;#c;#n;constructor({ast:i,partials:t,skipConditionals:s=!1,getInnerContent:r,renderTag:e,indexPromptTitles:o=!1}){if(this.#r=i,this.#e=t,this.#o=s,this.#s=r,this.#c=e,this.#n=o,!this.#r||!p(this.#r))throw new Error("ast is not a valid Markdoc Node.")}#i(i={}){return{skipConditionals:this.#o,renderTag:this.#c,...i}}*transform(){yield*this.#l(this.#r,{parentNode:null})}*#l(i,t,s=this.#s){if(!(!i||!p(i))){if(N(i)){if(this.#o)return;const r=b(i);r&&r.length>0&&(yield*this.#t(i,{...t,rbacTeams:r},s));return}if(m(i)){yield new n({node:i,content:s([i],this.#i()),...t});return}if(i.type==="heading"){yield new y({node:i,content:s([i],this.#i()),rbacTeams:t?.rbacTeams});return}if(i.type==="tag"){yield*this.#h(i,t,s);return}yield*this.#t(i,t,s)}}*#h(i,t,s=this.#s){switch(i.tag){case"partial":{const r=i.attributes.file,e=i.attributes.variables??{};if(r&&this.#e[r]){yield*this.#l(this.#e[r],t,(o,h)=>s(o,{...h,variables:e}));return}w.warn(`Could not create search indexes for partial \u201C${r}\u201D: file not found`);return}case"html":case"cards":case"tabs":case"code-walkthrough":{yield*this.#t(i,t,s);return}case a:{const r=f(i,"title");this.#n&&r&&(yield new u({node:i,content:r,...t}));return}case"markdoc-example":{const r=s([i],this.#i());yield new n({node:i,content:r,...t});return}case"code-snippet":{const r=f(i,"title"),e=s([i],this.#i());if(r){const o=new u({node:i,content:r,...t});t={...t,parentNode:o},yield o}e&&(yield new n({node:i,content:e,...t}));return}default:{const r=this.#f(i,t,s);if(r!==void 0){yield new n({node:i,content:k(r),...t});return}const e=g.find(l=>l in i.attributes),o=(e&&f(i,e))??"",h=typeof o=="string"?o:s([o]);if(h){const l=new u({node:i,content:h,...t});t={...t,parentNode:l},yield l}if(T(i))yield*this.#t(i,t,s);else{const l=s([i],this.#i());l&&(yield new n({node:i,content:l,...t}))}return}}}#f(i,t,s){const r=()=>T(i)?d([...this.#t(i,t,s)]):"";return this.#c?.(i,{getBody:r})}*#t(i,t,s=this.#s){for(const r of[...Object.values(i.slots),...i.children])for(const e of this.#l(r,t,s))e instanceof y&&(t={...t,parentNode:e}),yield e}}function T(c){return c.children.length>0||Object.keys(c.slots).length>0}function k(c){return c.endsWith(`
+`)?c:`${c}
+`}export{G as AstToSearchNodeTransformer};

package/dist/server/plugins/markdown/source.d.ts

@@ -0,0 +1,4 @@
+import type { Node } from '@markdoc/markdoc';
+export declare function getSourceRange(node: Node, linesOfCode: string[]): any;
+export declare function hashSourceContent(content: string): string;
+//# sourceMappingURL=source.d.ts.map

package/dist/server/plugins/markdown/source.js

@@ -0,0 +1 @@
+function s(e,t){if(e.lines.length===0)return"";let l="",i=[];if(e.location){const n=e.lines[0]+1;if(l+=`#L${n}`,n!==e.lines[e.lines.length-1]){const r=e.lines[e.lines.length-1];l+=`-L${e.lines[e.lines.length-1]}`,i=t.slice(n-1,r)}else i=[t[n-1]]}return{range:l,source:i}}function h(e){let t=5381,l=e.length;for(;l;)t=t*33^e.charCodeAt(--l);return(t>>>0).toString(16)}export{s as getSourceRange,h as hashSourceContent};

package/dist/server/plugins/markdown/utils/resolve-markdown-template.d.ts

@@ -0,0 +1,13 @@
+import type { MarkdownConfig } from '@redocly/config';
+export type ResolvedMarkdownTemplate = {
+    templateRef: string;
+    templatePath: string;
+};
+export type ResolveMarkdownTemplateParams = {
+    realRelativePath: string;
+    frontmatter?: Record<string, unknown>;
+    markdown?: MarkdownConfig;
+    contentDir: string;
+};
+export declare function resolveMarkdownTemplate({ realRelativePath, frontmatter, markdown, contentDir, }: ResolveMarkdownTemplateParams): ResolvedMarkdownTemplate | null;
+//# sourceMappingURL=resolve-markdown-template.d.ts.map

package/dist/server/plugins/markdown/utils/resolve-markdown-template.js

@@ -0,0 +1 @@
+import i from"path";import{resolveGlobMapValue as p}from"../../../utils/globs.js";function u({realRelativePath:t,frontmatter:e,markdown:r,contentDir:a}){const o=typeof e?.template=="string"?e.template:void 0;if(o)return{templateRef:o,templatePath:l(o,i.posix.dirname(t),a)};const n=p(t,r?.template);return n?{templateRef:n,templatePath:l(n,".",a)}:null}function l(t,e,r){return t.startsWith("./")||t.startsWith("../")?i.resolve(r,e,t):t}export{u as resolveMarkdownTemplate};

package/dist/server/plugins/markdown/utils/sanitize-malformed-md-content.d.ts

@@ -0,0 +1,6 @@
+/**
+ * IMPORTANT: this method is a workaround, not a proper fix. It should not be extended unless absolutely necessary.
+ * Modifying markdown content in this way can have unexpected side effects and is not transparent to the user.
+ */
+export declare function sanitizeMalformedMdContent(content: string): string;
+//# sourceMappingURL=sanitize-malformed-md-content.d.ts.map

package/dist/server/plugins/markdown/utils/sanitize-malformed-md-content.js

@@ -0,0 +1,2 @@
+function c(n){return n.replace(/\[(?<!\[[^\]()]*?\[)([^\]<]*<[^>]*>[^\]]*)\]\(([^)]+)\)/g,(r,t,s)=>`[${t.replace(/(`{1,16})[^`]+\1|[<>]/g,e=>e==="<"?"&lt;":e===">"?"&gt;":e)}](${s})`).replace(/({%\s*(\w+)(?:\s[^%]*)?%})(\s*)({%\s*\/\2\s*%})/g,(r,t,s,l,e)=>`${t}
+${e}`)}export{c as sanitizeMalformedMdContent};

package/dist/server/plugins/markdown/utils/stringify-tag-children-objects.d.ts

@@ -0,0 +1,3 @@
+import type { Tag } from '@markdoc/markdoc';
+export declare function stringifyTagChildrenObjects(tag?: Tag | null): void;
+//# sourceMappingURL=stringify-tag-children-objects.d.ts.map

package/dist/server/plugins/markdown/utils/stringify-tag-children-objects.js

@@ -0,0 +1 @@
+import{isTag as e}from"../../../../markdoc/helpers/guards/is-tag.js";function f(n){!n||!Array.isArray(n?.children)||n.children.forEach((r,i)=>{if(!(typeof r!="object"||r===null)){if(e(r)){f(r);return}n.children[i]=JSON.stringify(r,null,2)}})}export{f as stringifyTagChildrenObjects};

package/dist/server/plugins/mcp/audit/audit-log.d.ts

@@ -0,0 +1,36 @@
+export { AUDIT_LOG_PREFIX } from './constants.js';
+export declare const AUDIT_FIELD_MAX_CHARS = 4096;
+export type AuditField = string | number | boolean | undefined;
+export declare function auditSha256(value: string): string;
+/**
+ * Cuts at the last whitespace inside the budget rather than mid-token, so a secret is never split
+ * in half before the patterns get a look at it — half a token matches nothing and would survive.
+ */
+export declare function truncateAuditField(value: string): string;
+/**
+ * Redact an input payload (code, request body, tool arguments) down to something loggable.
+ * Truncation runs first so the patterns only ever see whole tokens, and so the 14 regexes run
+ * over at most `AUDIT_FIELD_MAX_CHARS` instead of a multi-megabyte body.
+ */
+export declare function auditInput(value: string, injectedSecretValues?: readonly string[]): string;
+/**
+ * Outputs are never recorded — an upstream response or tool result can hold credentials nobody
+ * can pattern-match. The digest still lets a replayed run be compared against the original.
+ */
+export declare function auditOutputDigest(value: string): {
+    sha256: string;
+    bytes: number;
+};
+/**
+ * Header values never reach the log. Redacting a fixed list of sensitive names would not be
+ * enough — sandbox code picks its own header names, so any allow-list leaks the creative ones.
+ */
+export declare function auditHeaderNames(headers: Record<string, string> | undefined): string;
+/** Full URL with its query string, credential-shaped parameter values replaced. */
+export declare function auditUrl(rawUrl: string, injectedSecretValues?: readonly string[], credentialQueryParams?: readonly string[]): string;
+/**
+ * Values are JSON-encoded so a multi-line payload (submitted code, an assembled prompt) stays on
+ * one log line, which is what makes one record one Grafana row.
+ */
+export declare function logAuditRecord(action: string, fields: Record<string, AuditField>): void;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/server/plugins/mcp/audit/audit-log.js

@@ -0,0 +1 @@
+import{createHash as c}from"node:crypto";import{logger as s}from"../../../tools/notifiers/logger.js";import{redactUrl as f}from"../../../utils/redact-url.js";import{AUDIT_LOG_PREFIX as p}from"./constants.js";import{redactSecretsFromString as u}from"../gateway-mcp/fetch/redact.js";import{redactSecretShapes as a}from"./secret-patterns.js";import{AUDIT_LOG_PREFIX as L}from"./constants.js";const i=4096;function d(t){return c("sha256").update(t,"utf8").digest("hex")}function m(t){if(t.length<=i)return t;const r=t.slice(0,i),o=r.search(/\s\S*$/),e=o>0?r.slice(0,o):r;return`${e}\u2026[truncated: kept ${e.length} of ${t.length} chars]`}function h(t,r=[]){return a(u(m(t),r))}function _(t){return{sha256:d(t),bytes:Buffer.byteLength(t,"utf8")}}function l(t){return Object.keys(t??{}).map(r=>r.toLowerCase()).sort().join(",")}function O(t,r=[],o=[]){return h(f(t,o),r)}function y(t,r){const o=Object.entries(r).filter(([,e])=>e!==void 0&&e!=="").map(([e,n])=>typeof n=="string"?`${e}=${JSON.stringify(n)}`:`${e}=${String(n)}`).join(" ");try{s.infoPreSanitized(`${p} ${t} ${o}`)}catch{}}export{i as AUDIT_FIELD_MAX_CHARS,L as AUDIT_LOG_PREFIX,l as auditHeaderNames,h as auditInput,_ as auditOutputDigest,d as auditSha256,O as auditUrl,y as logAuditRecord,m as truncateAuditField};

package/dist/server/plugins/mcp/audit/code-credentials.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Masks the credentials that sandbox code writes as string literals, whatever their shape: values
+ * under a credential-named header, field or variable (`Authorization`, `X-Api-Key`, `apiKey`,
+ * `client_secret`), `headers.set(name, value)` calls, `Bearer`/`Basic` values and credential query
+ * parameters inside URLs. The code keeps its structure. Code that does not parse comes back
+ * unchanged; the shape patterns of `auditInput` still apply to it.
+ */
+export declare function maskCodeCredentials(code: string): string;
+//# sourceMappingURL=code-credentials.d.ts.map

package/dist/server/plugins/mcp/audit/code-credentials.js

@@ -0,0 +1,2 @@
+import{parse as d}from"acorn";const m="[REDACTED:credential]",h={apikey:!0,auth:!0,authorization:!0,bearer:!0,cookie:!0,credential:!0,credentials:!0,key:!0,passwd:!0,password:!0,pwd:!0,secret:!0,sessionid:!0,signature:!0,token:!0},C=/^(?:Bearer|Basic|Token|Digest)\s+/i,k=/\b(Bearer|Basic)(\s+)[^\s'"`]+/gi,w=/([a-z0-9])([A-Z])/g,R=/[^a-z0-9]+/,_=`&# 	
+\r'"\``;function N(e){let t;try{t=d(e,{ecmaVersion:"latest",sourceType:"script",allowAwaitOutsideFunction:!0,allowReturnOutsideFunction:!0})}catch{return e}const r=new Set,i=[];y(t,s=>{for(const a of D(s))if(a.type==="TemplateLiteral")for(const c of a.quasis)r.add(c);else r.add(a);(g(s)||s.type==="TemplateElement")&&i.push(s)});let n=e;for(const s of i.sort((a,c)=>c.start-a.start)){const[a,c]=s.type==="Literal"?[s.start+1,s.end-1]:[s.start,s.end],f=e.slice(a,c),A=r.has(s)?L(f):T(f);A!==f&&(n=n.slice(0,a)+A+n.slice(c))}return n}function y(e,t){if(Array.isArray(e)){for(const r of e)y(r,t);return}if(p(e)){t(e);for(const r of Object.values(e))typeof r=="object"&&r!==null&&y(r,t)}}function D(e){switch(e.type){case"Property":return u(o(e.key,e.computed))?l(e.value):[];case"VariableDeclarator":return u(o(e.id,!1))?l(e.init):[];case"AssignmentExpression":{const t=e.left,r=t.type==="MemberExpression"?o(t.property,t.computed):o(t,!1);return u(r)?l(e.right):[]}case"CallExpression":{const t=e.callee,[r,i]=e.arguments,n=t.type==="MemberExpression"?o(t.property,t.computed):"";return(n==="set"||n==="append")&&u(E(r))?l(i):[]}case"ArrayExpression":{const t=e.elements;return t.length===2&&u(E(t[0]))?l(t[1]):[]}default:return[]}}function l(e){return p(e)&&(g(e)||e.type==="TemplateLiteral")?[e]:[]}function o(e,t){return p(e)?e.type==="Identifier"&&!t?e.name:E(e):""}function E(e){return p(e)&&g(e)?e.value:""}function g(e){return e.type==="Literal"&&typeof e.value=="string"}function p(e){return typeof e=="object"&&e!==null&&typeof e.type=="string"}function u(e){const t=e.replace(w,"$1 $2").toLowerCase().split(R).filter(Boolean),r=t.at(-1);return r!==void 0&&(h[r]||h[t.join("")])===!0}function L(e){const t=C.exec(e)?.[0]??"";return e.length>t.length?`${t}${m}`:e}function T(e){return O(e.replace(k,`$1$2${m}`))}function O(e){let t="",r=0;for(;r<e.length;){const i=e[r++];if(t+=i,i!=="?"&&i!=="&")continue;let n=r;for(;n<e.length&&!_.includes(e[n]);)n++;const s=e.slice(r,n),a=s.indexOf("="),c=a>0&&a<s.length-1&&u($(s.slice(0,a)));t+=c?`${s.slice(0,a+1)}${m}`:s,r=n}return t}function $(e){try{return decodeURIComponent(e)}catch{return e}}export{N as maskCodeCredentials};

package/dist/server/plugins/mcp/audit/constants.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Single token in front of every audit record so the whole class can be filtered in Grafana — or
+ * dropped in the log collector — with one rule.
+ */
+export declare const AUDIT_LOG_PREFIX = "[mcp-audit]";
+//# sourceMappingURL=constants.d.ts.map

package/dist/server/plugins/mcp/audit/constants.js

@@ -0,0 +1 @@
+const t="[mcp-audit]";export{t as AUDIT_LOG_PREFIX};

package/dist/server/plugins/mcp/audit/secret-patterns.d.ts

@@ -0,0 +1,2 @@
+export declare function redactSecretShapes(text: string): string;
+//# sourceMappingURL=secret-patterns.d.ts.map

package/dist/server/plugins/mcp/audit/secret-patterns.js

@@ -0,0 +1 @@
+const n=[{name:"aws_access_key_id",re:/\bAKIA[0-9A-Z]{16}\b/g},{name:"aws_temp_key",re:/\bASIA[0-9A-Z]{16}\b/g},{name:"github_token",re:/\bgh[pousr]_[A-Za-z0-9_]{20,255}\b/g},{name:"github_fine_grained",re:/\bgithub_pat_[A-Za-z0-9_]{60,255}\b/g},{name:"jwt",re:/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g},{name:"pem_private_key",re:/-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g},{name:"google_api_key",re:/\bAIza[0-9A-Za-z_-]{35}\b/g},{name:"slack_token",re:/\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g},{name:"bearer_token",re:/(?<=[Aa]uthorization\s*[:=]\s*["']?[Bb]earer\s{1,16})[A-Za-z0-9._\-+/=]{20,}/g},{name:"anthropic_key",re:/\bsk-ant-[A-Za-z0-9_-]{20,}\b/g},{name:"openai_key",re:/\bsk-(?:proj-|svcacct-)?[A-Za-z0-9_-]{20,}\b/g},{name:"stripe_key",re:/\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{20,}\b/g},{name:"sendgrid_key",re:/\bSG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}\b/g},{name:"basic_auth_url",re:/\b([a-z][a-z0-9+\-.]*:\/\/)[^\s/:@]+:[^\s/@]+@/gi}];function t(e){if(!e)return e;let a=e;for(const{name:r,re:_}of n)a=a.replace(_,(A,b)=>r==="basic_auth_url"?`${b??""}[REDACTED:${r}]@`:`[REDACTED:${r}]`);return a}export{t as redactSecretShapes};

package/dist/server/plugins/mcp/auth/assistant-anonymous-token.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Mints the token the portal sends with an anonymous visitor's assistant question, so that the
+ * Reunite API reaches `/mcp` with anonymous scope instead of an OAuth challenge. Returns nothing
+ * when this portal cannot mint a token its own `/mcp` would accept.
+ */
+export declare function createAssistantAnonymousToken(): Promise<string | undefined>;
+/** Tells whether the bearer is an unexpired token this project minted for its own AI assistant. */
+export declare function isAssistantAnonymousToken(token: string): Promise<boolean>;
+//# sourceMappingURL=assistant-anonymous-token.d.ts.map

package/dist/server/plugins/mcp/auth/assistant-anonymous-token.js

@@ -0,0 +1 @@
+import{hkdfSync as S}from"node:crypto";import{FALLBACK_JWT_SECRET_KEY as c}from"../../../constants/common.js";import{envConfig as o}from"../../../config/env-config.js";import{AlgorithmTypes as i}from"../../../web-server/jwt/types.js";import*as r from"../../../web-server/jwt/jwt.js";import{InternalTokenTypes as a}from"../../../web-server/jwt/token-types.js";import{ensureArray as m}from"../../../../utils/array/ensure-array.js";const T=600,u="ai-assistant-anonymous";function f(){const n=o.JWT_SECRET_KEY;if(!(!n||n===c||!o.PROJECT_ID))return Buffer.from(S("sha256",n,u,u,32)).toString("hex")}async function N(){const n=f();if(!n)return;const t=Math.floor(Date.now()/1e3);return r.sign({type:a.AI_ASSISTANT_ANONYMOUS,anonymous:!0,aud:o.PROJECT_ID,iat:t,exp:t+T},n,i.HS256)}async function I(n){const t=f();if(!t)return!1;try{await r.verify(n,t,i.HS256)}catch{return!1}const{payload:e}=r.decode(n),s=o.PROJECT_ID;return e.type===a.AI_ASSISTANT_ANONYMOUS&&e.anonymous===!0&&!!s&&m(e.aud).includes(s)}export{N as createAssistantAnonymousToken,I as isAssistantAnonymousToken};

package/dist/server/plugins/mcp/auth/auth-handlers.d.ts

@@ -0,0 +1,15 @@
+import type { ApiFunctionsContext, ApiFunctionsUser } from '@redocly/config';
+import type { Store } from '../../../store.js';
+export declare function isMcpContentProtected(store: Store): boolean;
+export type McpAuthResult = {
+    isAuthenticated: boolean;
+    isTokenValid?: boolean;
+    isFirstPartyAnonymous?: boolean;
+    currentUser?: ApiFunctionsUser;
+    accessToken?: string;
+};
+export declare function handleMcpAuth(request: Request, context: ApiFunctionsContext): Promise<McpAuthResult>;
+export declare function constructUnauthorizedResponse(baseUrl: string, publicMcpUrl?: string): Response;
+export declare function constructForbiddenResponse(): Response;
+export declare function constructInvalidTokenResponse(baseUrl: string, publicMcpUrl?: string): Response;
+//# sourceMappingURL=auth-handlers.d.ts.map

package/dist/server/plugins/mcp/auth/auth-handlers.js

@@ -0,0 +1 @@
+import{extractTokenFromAuthHeader as u}from"../../../plugins/mcp/utils/jwt.js";import{SUPPORTED_MCP_SCOPES as d}from"../constants.js";import{getUserParamsFromCookies as p}from"../../../web-server/auth.js";import{ServerRoutes as s}from"../../../../constants/api.js";import{withPathPrefix as l}from"@redocly/theme/core/utils";import{shouldHandleMcpAuth as h}from"../../../utils/rbac/should-handle-mcp-auth.js";import{isAssistantAnonymousToken as f}from"./assistant-anonymous-token.js";function R(t){const e=t.getConfig().access;return h(!!e?.requiresLogin,e?.rbac||{})}async function _(t,e){const n=t.headers.get("Authorization");if(!n)return{isAuthenticated:!1};const o=u(n);if(o&&await f(o))return{isAuthenticated:!1,isTokenValid:!0,isFirstPartyAnonymous:!0};const r=e?.config?.ssoDirect||{},i=o?await p(r,{authorization:o}):{};return o&&i&&i.isAuthenticated?{isAuthenticated:!0,isTokenValid:!0,currentUser:{teams:i.teams||[],email:i.email||"",claims:i,isAuthenticated:!0,idpAccessToken:i.idpAccessToken||void 0,idpId:i.idpId||void 0},accessToken:o}:{isAuthenticated:!1,isTokenValid:!1}}function a(t,e){const n=`${t}${s.MCP_OAUTH_PROTECTED_RESOURCE}${l("/mcp")}`,o=`${t}${s.MCP_OAUTH_AUTHORIZATION_SERVER}`,r=e?[`error="${e.code}"`,`error_description="${e.description}"`]:[];return r.push(`resource_metadata="${n}"`,`scope="${d.join(" ")}"`,`authorization_uri="${o}"`),`Bearer ${r.join(", ")}`}function c(t,e){return e?`${t}. A public endpoint that serves anonymous-accessible content is available at ${e}.`:t}function $(t,e){const n=c("Authentication required",e);return new Response(JSON.stringify({error:"unauthorized",message:n}),{status:401,headers:{"Content-Type":"application/json","WWW-Authenticate":a(t),"Access-Control-Allow-Origin":"*"}})}function y(){return new Response(JSON.stringify({error:"forbidden",message:"You do not have access to this MCP server"}),{status:403,headers:{"Content-Type":"application/json","Access-Control-Allow-Origin":"*"}})}function v(t,e){const n=c("Invalid or expired token",e);return new Response(JSON.stringify({error:"invalid_token",message:n}),{status:401,headers:{"Content-Type":"application/json","WWW-Authenticate":a(t,{code:"invalid_token",description:"Invalid or expired token"}),"Access-Control-Allow-Origin":"*"}})}export{y as constructForbiddenResponse,v as constructInvalidTokenResponse,$ as constructUnauthorizedResponse,_ as handleMcpAuth,R as isMcpContentProtected};