@redocly/realm 0.140.0-next.1 → 0.140.0-next.3

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @redocly/realm
 
+## 0.140.0-next.3
+
+### Patch Changes
+
+- d7d79acc8df: Extended how long MCP clients stay signed in to the authenticated Docs MCP server from 24 hours to 30 days when the identity provider issues refresh tokens.
+  Without refresh tokens, sessions still expire after 24 hours.
+- 95be56a3591: Fixed an issue where Visual review in Reunite showed a sign-in redirect loop for login-protected projects in browsers that block third-party cookies, such as Safari, Firefox, and Brave.
+- 95be56a3591: Improved the security of the Reunite Visual review sign-in for login-protected projects: Reunite no longer passes the session token in the URL.
+
+## 0.140.0-next.2
+
+### Patch Changes
+
+- c2de4371f03: Fixed an issue where search with the Typesense engine failed or took several seconds on projects with large API operations.
+
 ## 0.140.0-next.1
 
 ### Patch Changes
@@ -19,6 +34,16 @@
 - Updated dependencies [cc40376e265]
   - @redocly/api-docs@0.5.0-next.0
 
+## 0.139.2
+
+## 0.139.1
+
+### Patch Changes
+
+- e57c8b344f7: Fixed an issue where OpenAPI pages that use `allOf` inheritance with a `oneOf` discriminator caused the server to stop responding.
+- Updated dependencies [e57c8b344f7]
+  - @redocly/api-docs@0.4.1
+
 ## 0.139.0
 
 ### Minor Changes
@@ -3075,29 +3100,6 @@
   - @redocly/realm-asyncapi-sdk@0.9.0-next.2
   - @redocly/theme@0.63.0-next.3
 
-## 0.130.4
-
-### Patch Changes
-
-- 5b1e533559: Fixed security vulnerability CVE-2026-25128 in fast-xml-parser by upgrading openapi-sampler to version 1.7.0.
-- Updated dependencies [5b1e533559]
-  - @redocly/portal-plugin-mock-server@0.15.2
-  - @redocly/asyncapi-docs@1.7.2
-  - @redocly/openapi-docs@3.18.2
-  - @redocly/theme@0.62.1
-  - @redocly/graphql-docs@1.7.1
-
-## 0.130.3
-
-### Patch Changes
-
-- 0beb1adad0: Fixed a bug where AI search events were not tracked for project analytics.
-- Updated dependencies [e7708a15f1]
-- Updated dependencies [e7708a15f1]
-  - @redocly/portal-plugin-mock-server@0.15.1
-  - @redocly/asyncapi-docs@1.7.1
-  - @redocly/openapi-docs@3.18.1
-
 ## 0.131.0-next.6
 
 ### Patch Changes
@@ -3155,15 +3157,6 @@
   - @redocly/graphql-docs@1.8.0-next.2
   - @redocly/portal-plugin-mock-server@0.16.0-next.2
 
-## 0.130.2
-
-### Patch Changes
-
-- 4dfbc3b570: Fixed an issue where Project Analytics would not display any data for specific versions of Realm.
-- Updated dependencies [4dfbc3b570]
-  - @redocly/realm-asyncapi-sdk@0.8.1
-  - @redocly/theme@0.62.0
-
 ## 0.131.0-next.3
 
 ### Patch Changes
@@ -3198,12 +3191,6 @@
 - 713994c780: Fixed an issue where the execution environment wasn't recognized correctly causing build failures.
 - 1fa1e85405: Fixed an issue where the login button was not displayed when a default identity provider was configured.
 
-## 0.130.1
-
-### Patch Changes
-
-- 69f13ea40c: Fixed an issue where the login button was not displayed when a default identity provider was configured.
-
 ## 0.131.0-next.0
 
 ### Minor Changes
@@ -3230,6 +3217,44 @@
   - @redocly/graphql-docs@1.8.0-next.0
   - @redocly/openapi-docs@3.19.0-next.0
 
+## 0.130.4
+
+### Patch Changes
+
+- 5b1e533559: Fixed security vulnerability CVE-2026-25128 in fast-xml-parser by upgrading openapi-sampler to version 1.7.0.
+- Updated dependencies [5b1e533559]
+  - @redocly/portal-plugin-mock-server@0.15.2
+  - @redocly/asyncapi-docs@1.7.2
+  - @redocly/openapi-docs@3.18.2
+  - @redocly/theme@0.62.1
+  - @redocly/graphql-docs@1.7.1
+
+## 0.130.3
+
+### Patch Changes
+
+- 0beb1adad0: Fixed a bug where AI search events were not tracked for project analytics.
+- Updated dependencies [e7708a15f1]
+- Updated dependencies [e7708a15f1]
+  - @redocly/portal-plugin-mock-server@0.15.1
+  - @redocly/asyncapi-docs@1.7.1
+  - @redocly/openapi-docs@3.18.1
+
+## 0.130.2
+
+### Patch Changes
+
+- 4dfbc3b570: Fixed an issue where Project Analytics would not display any data for specific versions of Realm.
+- Updated dependencies [4dfbc3b570]
+  - @redocly/realm-asyncapi-sdk@0.8.1
+  - @redocly/theme@0.62.0
+
+## 0.130.1
+
+### Patch Changes
+
+- 69f13ea40c: Fixed an issue where the login button was not displayed when a default identity provider was configured.
+
 ## 0.130.0
 
 ### Minor Changes
@@ -3478,12 +3503,6 @@
   - @redocly/portal-plugin-mock-server@0.15.0-next.2
   - @redocly/graphql-docs@1.7.0-next.0
 
-## 0.129.2
-
-### Patch Changes
-
-- 237e61721c: Fixed an issue where project processing could halt indefinitely due to incorrect cache handling.
-
 ## 0.130.0-next.2
 
 ### Patch Changes
@@ -3523,6 +3542,12 @@
   - @redocly/openapi-docs@3.18.0-next.0
   - @redocly/theme@0.62.0-next.0
 
+## 0.129.2
+
+### Patch Changes
+
+- 237e61721c: Fixed an issue where project processing could halt indefinitely due to incorrect cache handling.
+
 ## 0.129.1
 
 ### Patch Changes
@@ -3646,19 +3671,6 @@
   - @redocly/portal-plugin-mock-server@0.14.0-next.3
   - @redocly/graphql-docs@1.6.0-next.0
 
-## 0.128.1
-
-### Patch Changes
-
-- 7a73a9957a: Fixed a bug where scorecard custom targets did not match.
-- fe3253dabb: Fixed an issue where the product picker was not properly aligned in the navbar.
-- Updated dependencies [fe3253dabb]
-  - @redocly/theme@0.60.1
-  - @redocly/asyncapi-docs@1.5.1
-  - @redocly/graphql-docs@1.5.0
-  - @redocly/openapi-docs@3.16.1
-  - @redocly/portal-plugin-mock-server@0.13.1
-
 ## 0.129.0-next.2
 
 ### Minor Changes
@@ -3723,6 +3735,19 @@
   - @redocly/graphql-docs@1.6.0-next.0
   - @redocly/theme@0.61.0-next.0
 
+## 0.128.1
+
+### Patch Changes
+
+- 7a73a9957a: Fixed a bug where scorecard custom targets did not match.
+- fe3253dabb: Fixed an issue where the product picker was not properly aligned in the navbar.
+- Updated dependencies [fe3253dabb]
+  - @redocly/theme@0.60.1
+  - @redocly/asyncapi-docs@1.5.1
+  - @redocly/graphql-docs@1.5.0
+  - @redocly/openapi-docs@3.16.1
+  - @redocly/portal-plugin-mock-server@0.13.1
+
 ## 0.128.0
 
 ### Minor Changes
@@ -4227,12 +4252,6 @@
   - @redocly/portal-plugin-mock-server@0.12.0-next.4
   - @redocly/graphql-docs@1.4.0-next.0
 
-## 0.126.2
-
-### Patch Changes
-
-- 80be5200e3: Fixed an issue where successive sidebar items were not activated when users were scrolling API document pages.
-
 ## 0.127.0-next.3
 
 ### Patch Changes
@@ -4281,20 +4300,6 @@
   - @redocly/openapi-docs@3.15.0-next.1
   - @redocly/portal-plugin-mock-server@0.12.0-next.1
 
-## 0.126.1
-
-### Patch Changes
-
-- 7a4401ae3f: Renamed the `get-full-definition` MCP tool to `get-full-spec-document`.
-- Updated dependencies [952ce6e27b]
-- Updated dependencies [77852d4f5c]
-  - @redocly/realm-asyncapi-sdk@0.4.1
-  - @redocly/theme@0.58.1
-  - @redocly/openapi-docs@3.14.1
-  - @redocly/asyncapi-docs@1.3.1
-  - @redocly/graphql-docs@1.3.0
-  - @redocly/portal-plugin-mock-server@0.11.1
-
 ## 0.127.0-next.0
 
 ### Minor Changes
@@ -4321,6 +4326,26 @@
   - @redocly/openapi-docs@3.15.0-next.0
   - @redocly/theme@0.59.0-next.0
 
+## 0.126.2
+
+### Patch Changes
+
+- 80be5200e3: Fixed an issue where successive sidebar items were not activated when users were scrolling API document pages.
+
+## 0.126.1
+
+### Patch Changes
+
+- 7a4401ae3f: Renamed the `get-full-definition` MCP tool to `get-full-spec-document`.
+- Updated dependencies [952ce6e27b]
+- Updated dependencies [77852d4f5c]
+  - @redocly/realm-asyncapi-sdk@0.4.1
+  - @redocly/theme@0.58.1
+  - @redocly/openapi-docs@3.14.1
+  - @redocly/asyncapi-docs@1.3.1
+  - @redocly/graphql-docs@1.3.0
+  - @redocly/portal-plugin-mock-server@0.11.1
+
 ## 0.126.0
 
 ### Minor Changes
@@ -4547,12 +4572,6 @@
   - @redocly/portal-plugin-mock-server@0.11.0-next.7
   - @redocly/graphql-docs@1.3.0-next.0
 
-## 0.125.3
-
-### Patch Changes
-
-- Fixed project analytics collection.
-
 ## 0.126.0-next.10
 
 ### Minor Changes
@@ -4613,19 +4632,6 @@
   - @redocly/graphql-docs@1.3.0-next.0
   - @redocly/portal-plugin-mock-server@0.11.0-next.4
 
-## 0.125.2
-
-### Patch Changes
-
-- 9578323801: Improved JavaScript compilation time on Windows.
-- Updated dependencies [1405d52ab2]
-  - @redocly/realm-asyncapi-sdk@0.4.0
-  - @redocly/theme@0.57.1
-  - @redocly/asyncapi-docs@1.2.1
-  - @redocly/graphql-docs@1.2.0
-  - @redocly/openapi-docs@3.13.1
-  - @redocly/portal-plugin-mock-server@0.10.1
-
 ## 0.126.0-next.6
 
 ### Patch Changes
@@ -4662,12 +4668,6 @@
   - @redocly/asyncapi-docs@1.3.0-next.1
   - @redocly/portal-plugin-mock-server@0.11.0-next.1
 
-## 0.125.1
-
-### Patch Changes
-
-- 28860eaf79: Fixed an issue where Markdoc tags did not render in preview mode.
-
 ## 0.126.0-next.3
 
 ### Patch Changes
@@ -4708,6 +4708,31 @@
   - @redocly/graphql-docs@1.3.0-next.0
   - @redocly/openapi-docs@3.14.0-next.0
 
+## 0.125.3
+
+### Patch Changes
+
+- Fixed project analytics collection.
+
+## 0.125.2
+
+### Patch Changes
+
+- 9578323801: Improved JavaScript compilation time on Windows.
+- Updated dependencies [1405d52ab2]
+  - @redocly/realm-asyncapi-sdk@0.4.0
+  - @redocly/theme@0.57.1
+  - @redocly/asyncapi-docs@1.2.1
+  - @redocly/graphql-docs@1.2.0
+  - @redocly/openapi-docs@3.13.1
+  - @redocly/portal-plugin-mock-server@0.10.1
+
+## 0.125.1
+
+### Patch Changes
+
+- 28860eaf79: Fixed an issue where Markdoc tags did not render in preview mode.
+
 ## 0.125.0
 
 ### Minor Changes
@@ -4871,44 +4896,6 @@
   - @redocly/openapi-docs@3.13.0-next.3
   - @redocly/portal-plugin-mock-server@0.10.0-next.3
 
-## 0.124.3
-
-### Patch Changes
-
-- Fixed an issue causing crashed during a build.
-- Updated dependencies
-  - @redocly/theme@0.56.3
-  - @redocly/asyncapi-docs@1.1.3
-  - @redocly/graphql-docs@1.1.0
-  - @redocly/openapi-docs@3.12.3
-  - @redocly/portal-plugin-mock-server@0.9.3
-
-## 0.124.2
-
-### Patch Changes
-
-- Fixed invalid dependency version causing dependency install to fail.
-- Updated dependencies
-  - @redocly/theme@0.56.2
-  - @redocly/asyncapi-docs@1.1.2
-  - @redocly/graphql-docs@1.1.0
-  - @redocly/openapi-docs@3.12.2
-  - @redocly/portal-plugin-mock-server@0.9.2
-
-## 0.124.1
-
-### Patch Changes
-
-- 76e2ff5afd: Fixed broken feedback submission.
-- 92a9326dd1: Fixed an issue where LLM page actions appeared on pages excluded from search.
-- Updated dependencies [a3e76e3587]
-- Updated dependencies [92a9326dd1]
-  - @redocly/theme@0.56.1
-  - @redocly/asyncapi-docs@1.1.1
-  - @redocly/graphql-docs@1.1.0
-  - @redocly/openapi-docs@3.12.1
-  - @redocly/portal-plugin-mock-server@0.9.1
-
 ## 0.125.0-next.2
 
 ### Patch Changes
@@ -4958,6 +4945,44 @@
   - @redocly/asyncapi-docs@1.2.0-next.0
   - @redocly/graphql-docs@1.2.0-next.0
 
+## 0.124.3
+
+### Patch Changes
+
+- Fixed an issue causing crashed during a build.
+- Updated dependencies
+  - @redocly/theme@0.56.3
+  - @redocly/asyncapi-docs@1.1.3
+  - @redocly/graphql-docs@1.1.0
+  - @redocly/openapi-docs@3.12.3
+  - @redocly/portal-plugin-mock-server@0.9.3
+
+## 0.124.2
+
+### Patch Changes
+
+- Fixed invalid dependency version causing dependency install to fail.
+- Updated dependencies
+  - @redocly/theme@0.56.2
+  - @redocly/asyncapi-docs@1.1.2
+  - @redocly/graphql-docs@1.1.0
+  - @redocly/openapi-docs@3.12.2
+  - @redocly/portal-plugin-mock-server@0.9.2
+
+## 0.124.1
+
+### Patch Changes
+
+- 76e2ff5afd: Fixed broken feedback submission.
+- 92a9326dd1: Fixed an issue where LLM page actions appeared on pages excluded from search.
+- Updated dependencies [a3e76e3587]
+- Updated dependencies [92a9326dd1]
+  - @redocly/theme@0.56.1
+  - @redocly/asyncapi-docs@1.1.1
+  - @redocly/graphql-docs@1.1.0
+  - @redocly/openapi-docs@3.12.1
+  - @redocly/portal-plugin-mock-server@0.9.1
+
 ## 0.124.0
 
 ### Minor Changes
@@ -5219,12 +5244,6 @@
   - @redocly/portal-plugin-mock-server@0.9.0-next.12
   - @redocly/graphql-docs@0.13.0-next.1
 
-## 0.123.1
-
-### Patch Changes
-
-- bdd218eb53: Fixed an issue where an RBAC match pattern starting with `**` did not override the global match pattern `**`.
-
 ## 0.124.0-next.17
 
 ### Patch Changes
@@ -5412,6 +5431,12 @@
   - @redocly/graphql-docs@0.13.0-next.0
   - @redocly/theme@0.56.0-next.0
 
+## 0.123.1
+
+### Patch Changes
+
+- bdd218eb53: Fixed an issue where an RBAC match pattern starting with `**` did not override the global match pattern `**`.
+
 ## 0.123.0
 
 ### Minor Changes
@@ -5499,18 +5524,6 @@
   - @redocly/openapi-docs@3.11.0-next.9
   - @redocly/portal-plugin-mock-server@0.8.0-next.9
 
-## 0.122.3
-
-### Patch Changes
-
-- d33ccaad3f: Fixed an issue where the Markdoc `tabs` tag incorrectly set the active state for the selected tab.
-- Updated dependencies [d33ccaad3f]
-  - @redocly/theme@0.54.3
-  - @redocly/asyncapi-docs@0.3.3
-  - @redocly/graphql-docs@0.11.0
-  - @redocly/openapi-docs@3.10.3
-  - @redocly/portal-plugin-mock-server@0.7.3
-
 ## 0.123.0-next.9
 
 ### Patch Changes
@@ -5535,18 +5548,6 @@
   - @redocly/openapi-docs@3.11.0-next.7
   - @redocly/portal-plugin-mock-server@0.8.0-next.7
 
-## 0.122.2
-
-### Patch Changes
-
-- 0cc1594c74: Fixed an issue where the tabs drop-down disappeared immediately after touch was released, preventing users from switching between tabs on mobile devices.
-- Updated dependencies [0cc1594c74]
-  - @redocly/theme@0.54.2
-  - @redocly/asyncapi-docs@0.3.2
-  - @redocly/graphql-docs@0.11.0
-  - @redocly/openapi-docs@3.10.2
-  - @redocly/portal-plugin-mock-server@0.7.2
-
 ## 0.123.0-next.7
 
 ### Patch Changes
@@ -5650,19 +5651,6 @@
   - @redocly/openapi-docs@3.11.0-next.1
   - @redocly/portal-plugin-mock-server@0.8.0-next.1
 
-## 0.122.1
-
-### Patch Changes
-
-- 534408676f: Fixed performance issue in the `Tabs` component.
-- 4f1e7786c4: Fixed false positive errors for unclosed quotes in `markdoc` attributes.
-- Updated dependencies [534408676f]
-  - @redocly/theme@0.54.1
-  - @redocly/asyncapi-docs@0.3.1
-  - @redocly/graphql-docs@0.11.0
-  - @redocly/openapi-docs@3.10.1
-  - @redocly/portal-plugin-mock-server@0.7.1
-
 ## 0.123.0-next.0
 
 ### Patch Changes
@@ -5681,6 +5669,43 @@
   - @redocly/theme@0.55.0-next.0
   - @redocly/realm-asyncapi-sdk@0.1.0-next.0
 
+## 0.122.3
+
+### Patch Changes
+
+- d33ccaad3f: Fixed an issue where the Markdoc `tabs` tag incorrectly set the active state for the selected tab.
+- Updated dependencies [d33ccaad3f]
+  - @redocly/theme@0.54.3
+  - @redocly/asyncapi-docs@0.3.3
+  - @redocly/graphql-docs@0.11.0
+  - @redocly/openapi-docs@3.10.3
+  - @redocly/portal-plugin-mock-server@0.7.3
+
+## 0.122.2
+
+### Patch Changes
+
+- 0cc1594c74: Fixed an issue where the tabs drop-down disappeared immediately after touch was released, preventing users from switching between tabs on mobile devices.
+- Updated dependencies [0cc1594c74]
+  - @redocly/theme@0.54.2
+  - @redocly/asyncapi-docs@0.3.2
+  - @redocly/graphql-docs@0.11.0
+  - @redocly/openapi-docs@3.10.2
+  - @redocly/portal-plugin-mock-server@0.7.2
+
+## 0.122.1
+
+### Patch Changes
+
+- 534408676f: Fixed performance issue in the `Tabs` component.
+- 4f1e7786c4: Fixed false positive errors for unclosed quotes in `markdoc` attributes.
+- Updated dependencies [534408676f]
+  - @redocly/theme@0.54.1
+  - @redocly/asyncapi-docs@0.3.1
+  - @redocly/graphql-docs@0.11.0
+  - @redocly/openapi-docs@3.10.1
+  - @redocly/portal-plugin-mock-server@0.7.1
+
 ## 0.122.0
 
 ### Minor Changes
@@ -5940,15 +5965,6 @@
   - @redocly/graphql-docs@0.11.0-next.0
   - @redocly/portal-plugin-mock-server@0.7.0-next.2
 
-## 0.121.1
-
-### Patch Changes
-
-- Updated dependencies [6b9d845619]
-  - @redocly/portal-plugin-mock-server@0.6.1
-  - @redocly/openapi-docs@3.9.1
-  - @redocly/asyncapi-docs@0.2.1
-
 ## 0.122.0-next.1
 
 ### Patch Changes
@@ -5978,6 +5994,15 @@
   - @redocly/graphql-docs@0.11.0-next.0
   - @redocly/openapi-docs@3.10.0-next.0
 
+## 0.121.1
+
+### Patch Changes
+
+- Updated dependencies [6b9d845619]
+  - @redocly/portal-plugin-mock-server@0.6.1
+  - @redocly/openapi-docs@3.9.1
+  - @redocly/asyncapi-docs@0.2.1
+
 ## 0.121.0
 
 ### Minor Changes
@@ -6101,12 +6126,6 @@
   - @redocly/openapi-docs@3.9.0-next.1
   - @redocly/portal-plugin-mock-server@0.6.0-next.1
 
-## 0.120.2
-
-### Patch Changes
-
-- 4a4316e308: Fixed an issue where using links to an OpenAPI file generated by the `output` configuration property caused errors which failed the build.
-
 ## 0.121.0-next.0
 
 ### Patch Changes
@@ -6121,6 +6140,12 @@
   - @redocly/openapi-docs@3.9.0-next.0
   - @redocly/theme@0.53.0-next.0
 
+## 0.120.2
+
+### Patch Changes
+
+- 4a4316e308: Fixed an issue where using links to an OpenAPI file generated by the `output` configuration property caused errors which failed the build.
+
 ## 0.120.1
 
 ### Patch Changes
@@ -6218,12 +6243,6 @@
   - @redocly/theme@0.52.0-next.3
   - @redocly/graphql-docs@0.9.0-next.0
 
-## 0.119.1
-
-### Patch Changes
-
-- e2afa2d1f7: Resolved vulnerabilities `CVE-2025-29774` and `CVE-2025-29775` by updating the `xml-crypto` library to a version `6.0.1` with a security patch.
-
 ## 0.120.0-next.3
 
 ### Patch Changes
@@ -6275,6 +6294,12 @@
   - @redocly/portal-plugin-mock-server@0.5.0-next.0
   - @redocly/theme@0.52.0-next.0
 
+## 0.119.1
+
+### Patch Changes
+
+- e2afa2d1f7: Resolved vulnerabilities `CVE-2025-29774` and `CVE-2025-29775` by updating the `xml-crypto` library to a version `6.0.1` with a security patch.
+
 ## 0.119.0
 
 ### Minor Changes

package/dist/server/constants/common.d.ts

@@ -1,4 +1,6 @@
 export declare const RUNTIME_RESOURCES_DIR = "runtime";
+export declare const SCORECARD_CLASSIC_FOLDER = "_scorecard";
+export declare const PAGE_DATA_FOLDER = "page-data";
 export declare const PUBLIC_ASSETS_FOLDER = "/assets";
 export declare const DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER = "/_spec";
 export declare const PUBLIC_API_DEFINITIONS_FOLDER = "/_bundle";
@@ -17,6 +19,7 @@ export declare const JWT_SECRET_KEY: string;
 export declare const MAX_AUTH_TOKEN_COOKIE_BYTES: number;
 export declare const MCP_ACCESS_TOKEN_TTL_SEC: number;
 export declare const MCP_REFRESH_SESSION_LIFETIME_SEC: number;
+export declare const MCP_CLAIMS_ONLY_SESSION_LIFETIME_SEC: number;
 export declare const I18N_DIR_NAME = "@i18n";
 export declare const L10N_DIR_NAME = "@l10n";
 export declare const RESERVED_DIR_NAMES: string[];

package/dist/server/constants/common.js

@@ -1 +1 @@
-import{ServerRoutes as n}from"../../constants/api.js";import{USER_THEME_ALIAS as A}from"../../constants/common.js";import{envConfig as _}from"../config/env-config.js";const N="runtime",x="/assets",a="/_spec",U="/_bundle",M="static",l="static-data",P="redocly:::linkOriginal",i="@",m="default",F=new RegExp("((?!@i18n\\/|@l10n\\/)\\/?@.*?(?=\\/))","g"),K="@redocly/theme/plugin.js",H="styles.css",Y=["@theme/plugin.js","@theme/plugin.cjs","@theme/plugin.mjs"],I="test_secret_key",B=_.JWT_SECRET_KEY||I,S=4096,L=196,d=S-L,u=3600,G=1440*60,c="@i18n",r="@l10n",g=[A,c,r,"@api","@mcp"],W="https://redocly.com/auth/aud",h="catalog.json",k="scorecard.json",J="page-count.json",f="sitemap.xml",w="llms.txt",o=_.PROJECT_ID,X=_.PROJECT_SLUG,R=_.ORGANIZATION_ID,j=_.ORG_SLUG,t=_.BH_API_URL,E=t&&R&&o?`${t}/orgs/${R}/projects/${o}`:void 0,p=t?`${t}/entitlements/.well-known/jwks`:"https://app.cloud.redocly.com/api/entitlements/.well-known/jwks",V=_.ENTITLEMENTS_JWKS_CDN_URL||p,$=E?`${E}/feedback`:"",v=E?`${E}/ai-agentic-conversations`:"",y=E?`${E}/ai-assistant-escalations`:"",b=E?`${E}/ai-assistant-feedback`:"",Z=E?`${E}/semantic-search`:"",q="no-store",z=365*24*60*60,Q="X-Redocly-Cache-Control",__="no-cache",E_="public, s-maxage=86400, max-age=10, must-revalidate",t_=_.AUTH_URL,o_="Developer Documentation",e=_.REDOCLY_SSR_RENDER_MODE==="worker"?"worker":"main",R_=e==="main"?0:_.REDOCLY_SSR_WORKERS_MIN!=null?Number(_.REDOCLY_SSR_WORKERS_MIN):2,e_=e==="main"?1:_.REDOCLY_SSR_WORKERS_MAX!=null?Number(_.REDOCLY_SSR_WORKERS_MAX):5,T_="-----BEGIN CERTIFICATE-----",s_="-----END CERTIFICATE-----",n_=!_.isDevelopMode&&_.REDOCLY_TELEMETRY!=="off"||_.REDOCLY_TELEMETRY==="on",A_="http://localhost:4318/v1/traces",I_=[n.HEALTH],T=_.SERVER_EDITOR_APP_URL||"http://127.0.0.1:3000",S_=_.REDOCLY_CORS_ORIGINS?_.REDOCLY_CORS_ORIGINS.split(",").map(s=>s.trim()).filter(Boolean).concat(T):[T],L_="markdown/partials",c_="markdown/partials-deps";export{y as AI_ASSISTANT_ESCALATIONS_API_URL,b as AI_ASSISTANT_FEEDBACK_API_URL,S_ as ALLOWED_CORS_ORIGINS,W as ALTERNATIVE_AUD_CLAIM_NAME,v as ASK_AI_API_URL,t_ as AUTH_URL,T_ as BEGIN_CERTIFICATE_DELIMITER,E as BH_API_PROJECTS_URL,q as CACHE_CONTROL_NO_STORE_HEADER_VALUE,__ as CACHE_CONTROL_PUBLIC_HTML,h as CATALOG_OUTPUT_FILE_NAME,z as DEFAULT_IMMUTABLE_CACHE_MAX_AGE,Y as DEFAULT_PROJECT_PLUGIN_PATHS,K as DEFAULT_THEME_PLUGIN_PATH,o_ as DEFAULT_TITLE,m as DEFAULT_VERSION_NAME,a as DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER,s_ as END_CERTIFICATE_DELIMITER,V as ENTITLEMENTS_JWKS_URL,I as FALLBACK_JWT_SECRET_KEY,$ as FEEDBACK_API_URL,c as I18N_DIR_NAME,B as JWT_SECRET_KEY,r as L10N_DIR_NAME,P as LINK_ORIGINAL_ATTR_NAME,w as LLMS_TXT_FILE_NAME,L_ as MARKDOC_PARTIALS_DATA_KEY,c_ as MARKDOC_PARTIALS_DEPS_KEY,d as MAX_AUTH_TOKEN_COOKIE_BYTES,u as MCP_ACCESS_TOKEN_TTL_SEC,G as MCP_REFRESH_SESSION_LIFETIME_SEC,R as ORG_ID,j as ORG_SLUG,I_ as OTEL_EXCLUDED_ROUTES,A_ as OTEL_TRACES_DEV_URL,J as PAGE_COUNT_OUTPUT_FILE_NAME,o as PROJECT_ID,X as PROJECT_SLUG,U as PUBLIC_API_DEFINITIONS_FOLDER,x as PUBLIC_ASSETS_FOLDER,M as PUBLIC_STATIC_FOLDER,g as RESERVED_DIR_NAMES,N as RUNTIME_RESOURCES_DIR,k as SCORECARD_OUTPUT_FILE_NAME,Z as SEMANTIC_SEARCH_API_URL,T as SERVER_EDITOR_APP_URL,f as SITEMAP_FILE_NAME,e as SSR_RENDER_MODE,e_ as SSR_WORKERS_MAX,R_ as SSR_WORKERS_MIN,l as STATIC_DATA_FOLDER,H as STYLES_FILE,n_ as TELEMETRY_ENABLED,F as VERSIONED_FOLDER_REGEXP_MATCH,i as VERSION_SEPARATOR,Q as X_REDOCLY_CACHE_CONTROL_HEADER,E_ as X_REDOCLY_CACHE_CONTROL_PUBLIC_HTML};
+import{ServerRoutes as n}from"../../constants/api.js";import{USER_THEME_ALIAS as A}from"../../constants/common.js";import{envConfig as _}from"../config/env-config.js";const N="runtime",x="_scorecard",a="page-data",M="/assets",U="/_spec",P="/_bundle",l="static",i="static-data",m="redocly:::linkOriginal",F="@",K="default",H=new RegExp("((?!@i18n\\/|@l10n\\/)\\/?@.*?(?=\\/))","g"),Y="@redocly/theme/plugin.js",d="styles.css",B=["@theme/plugin.js","@theme/plugin.cjs","@theme/plugin.mjs"],I="test_secret_key",G=_.JWT_SECRET_KEY||I,S=4096,L=196,u=S-L,g=3600,W=720*60*60,h=1440*60,c="@i18n",r="@l10n",k=[A,c,r,"@api","@mcp"],J="https://redocly.com/auth/aud",f="catalog.json",w="scorecard.json",X="page-count.json",j="sitemap.xml",V="llms.txt",o=_.PROJECT_ID,$=_.PROJECT_SLUG,R=_.ORGANIZATION_ID,v=_.ORG_SLUG,t=_.BH_API_URL,E=t&&R&&o?`${t}/orgs/${R}/projects/${o}`:void 0,C=t?`${t}/entitlements/.well-known/jwks`:"https://app.cloud.redocly.com/api/entitlements/.well-known/jwks",y=_.ENTITLEMENTS_JWKS_CDN_URL||C,b=E?`${E}/feedback`:"",Z=E?`${E}/ai-agentic-conversations`:"",q=E?`${E}/ai-assistant-escalations`:"",z=E?`${E}/ai-assistant-feedback`:"",Q=E?`${E}/semantic-search`:"",__="no-store",E_=365*24*60*60,t_="X-Redocly-Cache-Control",o_="no-cache",R_="public, s-maxage=86400, max-age=10, must-revalidate",e_=_.AUTH_URL,s_="Developer Documentation",e=_.REDOCLY_SSR_RENDER_MODE==="worker"?"worker":"main",T_=e==="main"?0:_.REDOCLY_SSR_WORKERS_MIN!=null?Number(_.REDOCLY_SSR_WORKERS_MIN):2,n_=e==="main"?1:_.REDOCLY_SSR_WORKERS_MAX!=null?Number(_.REDOCLY_SSR_WORKERS_MAX):5,A_="-----BEGIN CERTIFICATE-----",I_="-----END CERTIFICATE-----",S_=!_.isDevelopMode&&_.REDOCLY_TELEMETRY!=="off"||_.REDOCLY_TELEMETRY==="on",L_="http://localhost:4318/v1/traces",c_=[n.HEALTH],s=_.SERVER_EDITOR_APP_URL||"http://127.0.0.1:3000",r_=_.REDOCLY_CORS_ORIGINS?_.REDOCLY_CORS_ORIGINS.split(",").map(T=>T.trim()).filter(Boolean).concat(s):[s],C_="markdown/partials",O_="markdown/partials-deps";export{q as AI_ASSISTANT_ESCALATIONS_API_URL,z as AI_ASSISTANT_FEEDBACK_API_URL,r_ as ALLOWED_CORS_ORIGINS,J as ALTERNATIVE_AUD_CLAIM_NAME,Z as ASK_AI_API_URL,e_ as AUTH_URL,A_ as BEGIN_CERTIFICATE_DELIMITER,E as BH_API_PROJECTS_URL,__ as CACHE_CONTROL_NO_STORE_HEADER_VALUE,o_ as CACHE_CONTROL_PUBLIC_HTML,f as CATALOG_OUTPUT_FILE_NAME,E_ as DEFAULT_IMMUTABLE_CACHE_MAX_AGE,B as DEFAULT_PROJECT_PLUGIN_PATHS,Y as DEFAULT_THEME_PLUGIN_PATH,s_ as DEFAULT_TITLE,K as DEFAULT_VERSION_NAME,U as DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER,I_ as END_CERTIFICATE_DELIMITER,y as ENTITLEMENTS_JWKS_URL,I as FALLBACK_JWT_SECRET_KEY,b as FEEDBACK_API_URL,c as I18N_DIR_NAME,G as JWT_SECRET_KEY,r as L10N_DIR_NAME,m as LINK_ORIGINAL_ATTR_NAME,V as LLMS_TXT_FILE_NAME,C_ as MARKDOC_PARTIALS_DATA_KEY,O_ as MARKDOC_PARTIALS_DEPS_KEY,u as MAX_AUTH_TOKEN_COOKIE_BYTES,g as MCP_ACCESS_TOKEN_TTL_SEC,h as MCP_CLAIMS_ONLY_SESSION_LIFETIME_SEC,W as MCP_REFRESH_SESSION_LIFETIME_SEC,R as ORG_ID,v as ORG_SLUG,c_ as OTEL_EXCLUDED_ROUTES,L_ as OTEL_TRACES_DEV_URL,X as PAGE_COUNT_OUTPUT_FILE_NAME,a as PAGE_DATA_FOLDER,o as PROJECT_ID,$ as PROJECT_SLUG,P as PUBLIC_API_DEFINITIONS_FOLDER,M as PUBLIC_ASSETS_FOLDER,l as PUBLIC_STATIC_FOLDER,k as RESERVED_DIR_NAMES,N as RUNTIME_RESOURCES_DIR,x as SCORECARD_CLASSIC_FOLDER,w as SCORECARD_OUTPUT_FILE_NAME,Q as SEMANTIC_SEARCH_API_URL,s as SERVER_EDITOR_APP_URL,j as SITEMAP_FILE_NAME,e as SSR_RENDER_MODE,n_ as SSR_WORKERS_MAX,T_ as SSR_WORKERS_MIN,i as STATIC_DATA_FOLDER,d as STYLES_FILE,S_ as TELEMETRY_ENABLED,H as VERSIONED_FOLDER_REGEXP_MATCH,F as VERSION_SEPARATOR,t_ as X_REDOCLY_CACHE_CONTROL_HEADER,R_ as X_REDOCLY_CACHE_CONTROL_PUBLIC_HTML};

package/dist/server/plugins/api-docs/spec-download.api.js

@@ -1 +1 @@
-import n from"node:path";import{existsSync as u}from"node:fs";import{readFile as S}from"node:fs/promises";import q from"js-yaml";import{withoutPathPrefix as j}from"@redocly/theme/core/utils";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as x,PUBLIC_API_DEFINITIONS_FOLDER as w}from"../../constants/common.js";import{GRAPHQL_SPEC_SLUG as g}from"../../../constants/common.js";import{canDownloadApiDefinition as C,filterDataByAccessDeep as T}from"../../utils/rbac.js";import{API_DOWNLOAD_PREFIXES as U}from"../../utils/is-api-download-link.js";const v=[".json",".yaml",".yml"],B=[".graphql",".gql"];function A(s,e){const o=n.parse(s);return n.join(o.dir,o.name+e)}function G(s){let e;try{e=decodeURIComponent(s)}catch{return}return e.includes("\\")||e.split("/").slice(1).some(t=>t===""||t==="."||t==="..")?void 0:e}const X=async(s,e,o)=>{const{isAuthenticated:t,teams:d,claims:{email:f}}=e.user,y=new URL(s.url),a=G(j(y.pathname));if(a===void 0)return new Response("Bad Request",{status:400});const c=U.find(r=>a.startsWith(`${r}/`));if(c===void 0)return new Response("Not found",{status:404});const m=c===g,i=a.slice(c.length),p=n.extname(i);if(!(m?B:v).includes(p))return new Response("Not found",{status:404});const{rbac:h={},requiresLogin:P=!1}=e.config.access||{};if(!C(a,h,P,{isAuthenticated:t,email:f,teams:d}))return new Response("Unauthorized",{status:t?403:401});const l=o.props?.outdir||"";if(m){const r=n.join(l,w,i);if(!u(r))return new Response("Not found",{status:404});const L=await S(r,"utf-8");return new Response(L,{headers:{"Content-Type":"application/graphql"}})}const R=n.join(l,w,A(i,".json")),E=n.join(l,x,A(i,".json")),I=u(R),D=u(E);if(!I&&!D)return new Response("Not found",{status:404});const _=await S(I?R:E,"utf-8"),F=JSON.parse(_),N=T(F,{isAuthenticated:t,email:f,teams:d},h,P),O=p===".yaml"?q.dump(N):JSON.stringify(N,null,2);return new Response(O,{headers:{"Content-Type":p===".yaml"?"application/yaml":"application/json"}})};var Y=X;export{Y as default};
+import t from"node:path";import{existsSync as u}from"node:fs";import{readFile as w}from"node:fs/promises";import q from"js-yaml";import{withoutPathPrefix as j}from"@redocly/theme/core/utils";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as x,PUBLIC_API_DEFINITIONS_FOLDER as A}from"../../constants/common.js";import{GRAPHQL_SPEC_SLUG as g}from"../../../constants/common.js";import{canDownloadApiDefinition as T,filterDataByAccessDeep as C}from"../../utils/rbac.js";import{API_DOWNLOAD_PREFIXES as U}from"../../utils/is-api-download-link.js";import{decodeRequestPath as B}from"../../utils/decode-request-path.js";const G=[".json",".yaml",".yml"],W=[".graphql",".gql"];function S(i,n){const s=t.parse(i);return t.join(s.dir,s.name+n)}const X=async(i,n,s)=>{const{isAuthenticated:r,teams:f,claims:{email:m}}=n.user,D=new URL(i.url),e=B(j(D.pathname));if(e===void 0||e.endsWith("/"))return new Response("Bad Request",{status:400});const c=U.find(a=>e.startsWith(`${a}/`));if(c===void 0)return new Response("Not found",{status:404});const d=c===g,o=e.slice(c.length),p=t.extname(o);if(!(d?W:G).includes(p))return new Response("Not found",{status:404});const{rbac:h={},requiresLogin:P=!1}=n.config.access||{};if(!T(e,h,P,{isAuthenticated:r,email:m,teams:f}))return new Response("Unauthorized",{status:r?403:401});const l=s.props?.outdir||"";if(d){const a=t.join(l,A,o);if(!u(a))return new Response("Not found",{status:404});const L=await w(a,"utf-8");return new Response(L,{headers:{"Content-Type":"application/graphql"}})}const R=t.join(l,A,S(o,".json")),E=t.join(l,x,S(o,".json")),N=u(R),_=u(E);if(!N&&!_)return new Response("Not found",{status:404});const y=await w(N?R:E,"utf-8"),F=JSON.parse(y),I=C(F,{isAuthenticated:r,email:m,teams:f},h,P),O=p===".yaml"?q.dump(I):JSON.stringify(I,null,2);return new Response(O,{headers:{"Content-Type":p===".yaml"?"application/yaml":"application/json"}})};var Z=X;export{Z as default};