@redocly/redoc-reef 0.138.0-next.13 → 0.138.0-next.14

package/dist/server/web-server/routes/mcp-routes/mcp-oauth.d.ts

@@ -1,31 +0,0 @@
-import type { Handler } from 'hono';
-import type { SsoConfig } from '@redocly/config';
-import type { Store } from '../../../store.js';
-export type McpContextPayload = {
-    isMcpFlow: boolean;
-    originalRedirectUri: string | null;
-    mcpClientId: string | null;
-    mcpState: string | null;
-    mcpSessionId: string;
-    mcpCodeChallenge?: string | null;
-    mcpCodeChallengeMethod?: string | null;
-    mcpClientName?: string | null;
-    timestamp: number;
-};
-export declare const SUPPORTED_MCP_GRANT_TYPES: readonly ['authorization_code', 'refresh_token'];
-export declare function verifyPkce(codeChallenge: string | undefined, codeChallengeMethod: string | undefined, codeVerifier: string): boolean;
-export declare function createMcpContextToken(context: McpContextPayload): Promise<string>;
-export declare function verifyAndParseMcpContextToken(token: string): Promise<McpContextPayload>;
-export declare function mcpOAuthProtectedResourceHandler(store: Store): Handler;
-export declare function mcpOAuthAuthorizationServerHandler(store: Store): Handler;
-/**
- * This code is not used in the MCP server, but it is required to satisfy the OAuth 2.0 Dynamic Client Registration Protocol.
- * Also it is simulating the client registration process.
- */
-export declare function mcpDynamicClientRegistrationHandler(store: Store): Handler;
-export declare function resolveMcpIdpId(ssoDirect: SsoConfig | undefined): string | undefined;
-export declare function mcpAuthorizationHandler(store: Store): Handler;
-export declare function mcpTokenPortalHandler(store: Store): Handler;
-export declare function mcpCallbackHandler(store: Store): Handler;
-export declare function mcpConsentHandler(store: Store): Handler;
-//# sourceMappingURL=mcp-oauth.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-oauth.js

@@ -1 +0,0 @@
-import{getCookie as H}from"hono/cookie";import{createHash as F,timingSafeEqual as ne}from"node:crypto";import{ulid as oe}from"ulid";import{isRedoclySso as ie,isOidcProviderConfig as R,createMcpAuthorizationCode as se,verifyMcpAuthorizationCode as ae,createMcpRefreshToken as G,verifyMcpRefreshToken as ce,createMcpSessionResource as M,oidcRefreshTokenGrant as de,getOidcMetadata as pe,getUserParamsFromCookies as ue,idTokenIsForThisProject as le}from"../../auth.js";import{isMcpContentProtected as P}from"../../../plugins/mcp/auth/auth-handlers.js";import{resolveSiteBranding as _e}from"../../../plugins/mcp/handlers/credentials-page/site-branding.js";import{SUPPORTED_MCP_SCOPES as E}from"../../../plugins/mcp/constants.js";import{AUTH_URL as fe,JWT_SECRET_KEY as m,MCP_ACCESS_TOKEN_TTL_SEC as b,MCP_REFRESH_SESSION_LIFETIME_SEC as K}from"../../../constants/common.js";import{ServerRoutes as I}from"../../../../constants/api.js";import{AuthCookieNames as v}from"../../../../constants/common.js";import{withPathPrefix as w}from"@redocly/theme/core/utils";import{telemetry as y}from"../../../telemetry/index.js";import{envConfig as q}from"../../../config/env-config.js";import*as C from"../../jwt/jwt.js";import{InternalTokenTypes as O,McpAccessTokenMarker as U}from"../../jwt/token-types.js";import{AlgorithmTypes as A,JwtAlgorithmNotImplemented as he,JwtTokenExpired as me,JwtTokenInvalid as ge,JwtTokenNotBefore as Ce,JwtTokenSignatureMismatched as Te}from"../../jwt/types.js";import{getRequestOrigin as L}from"../../utils/get-request-origin.js";import{encryptClaimValue as B}from"../../../utils/crypto/encrypt-claim-value.js";import{decryptAesGcm as ke}from"../../../utils/crypto/decrypt-aes-gcm.js";import{encryptAesGcm as J}from"../../../utils/crypto/encrypt-aes-gcm.js";import{fetchClientMetadataDocument as Se,isClientMetadataDocumentUrl as j,isRedirectUriRegistered as Ie}from"./mcp-client-metadata.js";import{CONSENT_PAGE_HEADERS as V,MCP_CONSENT_TTL_SEC as we,consentInvalidPage as Me,consentPage as Ee}from"./mcp-consent-page.js";import{MCP_CONSENT_MEMORY_DAYS as ye,hasConsent as Ae,redeemAuthorizationCode as Re,redeemRefreshToken as Pe,saveConsent as ve}from"./mcp-oauth-store.js";const s=(r,e,t=200,n)=>r.json(e,t,{"Content-Type":"application/json",...n??{}}),z=new Set(["S256"]),$=["authorization_code","refresh_token"],Oe="https://claude.ai/oauth/claude-code-client-metadata";function Ue(r,e,t){if(!r||!z.has(e||""))return!1;const n=F("sha256").update(t).digest("base64url"),i=Buffer.from(n),a=Buffer.from(r);return i.length!==a.length?!1:ne(i,a)}async function Le(r){const e=Math.floor(Date.now()/1e3);return C.sign({type:O.MCP_CONTEXT,...r,iat:e,exp:e+600},m,A.HS256)}async function Ne(r){await C.verify(r,m,A.HS256);const{payload:e}=C.decode(r);if(e.type!==O.MCP_CONTEXT)throw new Error("Invalid context token type");return e}function fr(r){return async e=>{if(!P(r))return s(e,{error:"not_found"},404);if(e.req.method!=="GET")return s(e,{error:"Method not allowed"},405,{Allow:"GET"});const t=L(e);return s(e,{resource:`${t}${w("/mcp")}`,authorization_servers:[t],bearer_methods_supported:["header"],resource_documentation:`${t}${I.MCP_OAUTH_AUTHORIZATION_SERVER}`,scopes_supported:[...E],bearer_token_types_supported:["Bearer"]},200,{"Access-Control-Allow-Origin":"*"})}}function hr(r){return async e=>{if(!P(r))return s(e,{error:"not_found"},404);const t=L(e);return s(e,{issuer:t,authorization_endpoint:`${t}${w(I.MCP_AUTHORIZATION)}`,token_endpoint:`${t}${w(I.MCP_TOKEN_PORTAL)}`,scopes_supported:[...E],registration_endpoint:`${t}${w(I.MCP_DYNAMIC_CLIENT_REGISTRATION)}`,response_types_supported:["code"],grant_types_supported:[...$],subject_types_supported:["public"],id_token_signing_alg_values_supported:["RS256"],code_challenge_methods_supported:["S256"],token_endpoint_auth_methods_supported:["none"],client_id_metadata_document_supported:!0},200,{"Access-Control-Allow-Origin":"*"})}}function mr(r){return async e=>{if(!P(r))return s(e,{error:"not_found"},404);if(e.req.method!=="POST")return s(e,{error:"Method not allowed"},405);try{return s(e,{client_id:q.OAUTH_CLIENT_ID||"",client_name:"MCP Client",redirect_uris:[],grant_types:[...$],response_types:["code"],scope:E.join(" "),subject_type:"public",token_endpoint_auth_method:"none",created_at:new Date().toISOString(),updated_at:new Date().toISOString()},201,{"Access-Control-Allow-Origin":"*"})}catch(t){return s(e,{error:"invalid_request",error_description:t?.message||"Unable to register client"},500,{"Access-Control-Allow-Origin":"*"})}}}const De=new Set(["127.0.0.1","localhost","[::1]"]),He=new Set(["http:","https:","ws:","wss:","ftp:","file:"]),be=new Set(["javascript:","data:","blob:","about:","vbscript:","intent:","chrome:","view-source:","ms-msdt:","ms-appx-web:"]),qe=2048,je=/[\s\p{Cc}]/u;function W(r){return r.protocol==="http:"&&De.has(r.hostname)}function Y(r){if(!r||r.length>qe||r.includes("#")||je.test(r))return;const e=URL.parse(r);if(e){if(e.protocol==="https:"||W(e))return r.toLowerCase().startsWith(`${e.protocol}//`)?e:void 0;if(!(He.has(e.protocol)||be.has(e.protocol)))return e}}function Z(r){const e=r||{},t=Object.keys(e),n=t.find(a=>R(e[a])&&ie(e[a])),i=t.find(a=>R(e[a]));return n||i||t[0]}function gr(r){return async e=>{if(!P(r))return s(e,{error:"not_found"},404);const t=new URL(e.req.url),{searchParams:n}=t,i=n.get("redirect_uri"),a=n.get("client_id"),c=n.get("code_challenge"),o=n.get("code_challenge_method"),d=oe();if(!i||!Y(i))return s(e,{error:"invalid_request",error_description:"redirect_uri must be an https URL, a loopback http URL, or a private-use scheme"},400);if(!c)return s(e,{error:"invalid_request",error_description:"code_challenge is required"},400);if(!z.has(o||""))return s(e,{error:"invalid_request",error_description:`Unsupported code_challenge_method. Supported: ${[...z].join(", ")}`},400);let p;if(j(a))try{const u=await Se(a);p=u.client_name;const _=a===Oe;if(!Ie(i,u.redirect_uris,{ignorePort:_}))return s(e,{error:"invalid_request",error_description:"redirect_uri is not registered for this client"},400)}catch(u){const _=u instanceof Error?u.message:String(u);return s(e,{error:"invalid_client",error_description:`Unable to resolve client metadata document: ${_}`},400)}y.sendMcpAuthorizationStartedMessage([{...M(d),redirect_uri:i||null}]);const l=L(e),k={isMcpFlow:!0,originalRedirectUri:i,mcpClientId:a,mcpState:n.get("state"),mcpSessionId:d,mcpCodeChallenge:c,mcpCodeChallengeMethod:o,mcpClientName:p,timestamp:Date.now()};try{const u=await Le(k),_=new URL(w(I.IDP_LOGIN),l);_.searchParams.set("redirectTo",`${I.MCP_CALLBACK}/${u}`);const h=Z(r.getConfig().ssoDirect);return h?(_.searchParams.set("idpId",h),e.redirect(_.toString())):s(e,{error:"not_found"},404)}catch(u){const _=u instanceof Error?u.message:String(u),h=u instanceof Error?u.stack:String(u);y.sendMcpAuthorizationFailedMessage([{...M(d),error:_,error_details:h}]);const S=new URL(w(`${fe}/oauth2/auth`));return S.search=n.toString(),e.redirect(S.toString())}}}async function X(r){const e=Math.floor(Date.now()/1e3),t=r.ttlSec?e+r.ttlSec:Math.min(typeof r.claims.exp=="number"?r.claims.exp:1/0,e+b);return{accessToken:await C.sign({...r.claims,[U.CLAIM]:U.VALUE,...r.idpId?{idpId:r.idpId}:{},...r.idpAccessTokenEnc?{idp_access_token:r.idpAccessTokenEnc}:{},...r.ttlSec?{iat:e}:{},exp:t},m,A.HS256,r.kid),expiresIn:Math.max(t-e,0)}}async function ze(r,e,t){const n=T=>s(r,{error:"invalid_grant",error_description:T},400),i=r.get("logger"),a=t.get("refresh_token"),c=t.get("client_id")||void 0;if(!a)return s(r,{error:"invalid_request",error_description:"refresh_token is required"},400);let o;try{o=await ce(a)}catch(T){return i?.warn("MCP refresh token rejected: %s",T instanceof Error?T.message:String(T)),n("Invalid refresh token")}if(c&&c!==o.client_id)return n("Client mismatch");const d=o.idp_id?e.getConfig().ssoDirect?.[o.idp_id]:void 0;let p,l,k=o.idp_access_token_enc,u=o.idp_refresh_token_enc;if(o.idp_refresh_token_enc){let T;try{T=ke(o.idp_refresh_token_enc,m)}catch{return n("Invalid refresh token")}if(!o.idp_id||!R(d))return n("Unknown identity provider");let f;try{const g=await pe(o.idp_id,d);if(!g?.token_endpoint)return n("Identity provider has no token endpoint");f=await de(g.token_endpoint,T,d)}catch(g){return i?.warn("MCP refresh failed to reach the IdP token endpoint: %s",g instanceof Error?g.message:String(g)),s(r,{error:"server_error",error_description:"Failed to refresh session"},500)}if(f.error||!(f.id_token||f.access_token))return i?.warn("MCP refresh rejected by IdP: %s",f.error||"empty token response"),n("Refresh rejected by identity provider");if(f.refresh_token&&(u=J(f.refresh_token,m)),f.access_token&&(k=B(f.access_token,m)),f.id_token){try{const g=C.decode(f.id_token);p=g.payload,l=g.header.kid}catch{return n("Invalid token response from identity provider")}if(p.iss!==o.claims.iss||p.sub!==o.claims.sub)return i?.warn("MCP refresh rejected: the id_token names another issuer or subject"),n("Invalid refresh token")}}const _=Math.min(R(d)&&d.tokenExpirationTime||b,b),h=p??o.claims;if(!le(h,d))return i?.warn("MCP refresh rejected: the id_token was issued for another project"),n("Invalid refresh token");if(!await Pe(await e.getKv(),a,o.exp))return i?.warn("MCP refresh rejected: the refresh token was already used"),n("Refresh token already used");const S=await X({claims:h,kid:l,idpId:o.idp_id,idpAccessTokenEnc:k,ttlSec:p?void 0:_}),D=await G({clientId:o.client_id,idpId:o.idp_id,claims:h,idpAccessTokenEnc:k,idpRefreshTokenEnc:u,sessionExp:o.session_exp});return s(r,{access_token:S.accessToken,token_type:"Bearer",expires_in:S.expiresIn,refresh_token:D,scope:E.join(" ")},200,{"Cache-Control":"no-store",Pragma:"no-cache"})}function Cr(r){return async e=>{if(e.req.method!=="POST")return s(e,{error:"Method not allowed"},405);try{const t=await e.req.formData(),n=t.get("grant_type"),i=t.get("code"),a=t.get("redirect_uri")||void 0,c=t.get("code_verifier")||void 0;if(!$.includes(n))return s(e,{error:"invalid_request",error_description:"Invalid grant type"},400);if(n==="refresh_token")return await ze(e,r,t);if(!i)return s(e,{error:"invalid_request",error_description:"Missing authorization code"},400);try{const o=await ae(i);if(a&&a!==o.redirect_uri)return s(e,{error:"invalid_grant",error_description:"redirect_uri mismatch"},400);if(!c)return s(e,{error:"invalid_grant",error_description:"code_verifier required"},400);if(!Ue(o.code_challenge,o.code_challenge_method,c))return s(e,{error:"invalid_grant",error_description:"code_verifier mismatch"},400);if(q.OAUTH_CLIENT_ID&&o.client_id&&!j(o.client_id)&&o.client_id!==q.OAUTH_CLIENT_ID)return s(e,{error:"invalid_client",error_description:"Client mismatch"},400);const d=o.id_token;if(typeof d!="string"||d.length===0)return s(e,{error:"invalid_grant",error_description:"Missing id_token in authorization code"},400);const p=await Q(d,r.getConfig().ssoDirect);if(!p)return s(e,{error:"invalid_grant",error_description:"Invalid authorization code"},400);if(!await Re(await r.getKv(),i,o.exp))return s(e,{error:"invalid_grant",error_description:"Authorization code already used"},400);const l=o.idp_access_token_enc,{accessToken:k,expiresIn:u}=await X({claims:p.payload,kid:p.kid,idpId:o.idp_id,idpAccessTokenEnc:l}),h=Math.floor(Date.now()/1e3)+K,S=await G({clientId:o.client_id,idpId:o.idp_id,claims:p.payload,idpAccessTokenEnc:l,idpRefreshTokenEnc:o.idp_refresh_token_enc,sessionExp:h}),D={access_token:k,token_type:"Bearer",expires_in:u,refresh_token:S,scope:E.join(" ")};return s(e,D,200,{"Cache-Control":"no-store",Pragma:"no-cache"})}catch(o){return e.get("logger")?.warn("MCP token exchange failed: %s",o instanceof Error?o.message:String(o)),s(e,{error:"invalid_grant",error_description:"Invalid authorization code"},400)}}catch(t){const n=t instanceof Error?t.message:String(t);return s(e,{error:"server_error",error_description:"Failed to process token request",error_details:n},500)}}}async function Q(r,e){const t=await ue(e||{},{[v.AUTHORIZATION]:r});if(t.isAuthenticated!==!0)return;const{payload:n,header:i}=C.decode(r);if(n[U.CLAIM]!==U.VALUE)return{payload:n,kid:i.kid,idpId:typeof t.idpId=="string"?t.idpId:void 0}}function N(r){return F("sha256").update(r).digest("base64url")}async function $e(r){const e=Math.floor(Date.now()/1e3);return C.sign({type:O.MCP_CONSENT,session_hash:N(r.sessionToken),context_hash:N(r.contextToken),iat:e,exp:e+we},m,A.HS256)}async function Fe(r,e){try{await C.verify(r,m,A.HS256)}catch{return!1}const{payload:t}=C.decode(r);return t.type===O.MCP_CONSENT&&t.session_hash===N(e.sessionToken)&&t.context_hash===N(e.contextToken)}function x(r,e){return async t=>{const n=new URL(t.req.url);let i=n.searchParams.get("context");if(!i&&n.pathname.startsWith(w(`${I.MCP_CALLBACK}/`))){const c=n.pathname.split("/");i=c[c.length-1]}if(!i)return t.text("Missing context parameter",400);let a=null;try{const c=await Ne(i);a=c.mcpSessionId||null;const o=c.originalRedirectUri,d=Y(o);if(!c.isMcpFlow||!o||!d)throw new Error("Invalid MCP context");const p=H(t,v.AUTHORIZATION),l=p?await Q(p,r.getConfig().ssoDirect):void 0;return!p||!l?(y.sendMcpAuthorizationFailedMessage([{...M(a),error:"Authentication required",error_details:null}]),t.text("Authentication required",401)):await e(t,{contextToken:i,mcpContext:c,redirectUri:o,redirectUrl:d,sessionToken:p,session:l})}catch(c){const o=Be(c);return y.sendMcpAuthorizationFailedMessage([{...M(a),...o}]),t.text(`Invalid MCP callback: ${o.error}`,400)}}}async function ee(r,e,{mcpContext:t,redirectUri:n,redirectUrl:i,sessionToken:a,session:c}){const o=H(r,v.IDP_ACCESS_TOKEN),d=H(r,v.IDP_REFRESH_TOKEN),p=await se({idToken:a,idpId:c.idpId??Z(e.getConfig().ssoDirect),idpAccessTokenEnc:o?B(o,m):void 0,idpRefreshTokenEnc:d?J(d,m):void 0,clientId:t.mcpClientId||"",redirectUri:n,codeChallenge:t.mcpCodeChallenge||void 0,codeChallengeMethod:t.mcpCodeChallengeMethod||void 0,ttlSec:600}),l=new URL(i);return l.searchParams.set("code",p),t.mcpState&&l.searchParams.set("state",t.mcpState),y.sendMcpAuthorizationCompletedMessage([{...M(t.mcpSessionId||null),redirect_uri:n}]),r.redirect(l.toString())}function Ge(r,{mcpContext:e,redirectUrl:t}){const n=new URL(t);return n.searchParams.set("error","access_denied"),e.mcpState&&n.searchParams.set("state",e.mcpState),y.sendMcpAuthorizationFailedMessage([{...M(e.mcpSessionId||null),error:"access_denied",error_details:null}]),r.redirect(n.toString())}function Ke({payload:r}){return[r.email,r.name,r.sub].find(e=>typeof e=="string"&&e.length>0)}function re({mcpContext:r,redirectUri:e,session:t}){const{sub:n}=t.payload;if(!(typeof n!="string"||n.length===0))return{idpId:t.idpId,subject:n,clientId:r.mcpClientId||"",redirectUri:e}}function te(r,e){const{seo:t,colorMode:n}=e.getConfig(),{logo:i}=e.getGlobalData();return{..._e({seo:t,logo:i,colorMode:n}),host:new URL(L(r)).host}}function Tr(r){return x(r,async(e,t)=>{const n=re(t);if(W(t.redirectUrl)||n&&await Ae(await r.getKv(),n))return ee(e,r,t);const{mcpClientId:i,mcpClientName:a}=t.mcpContext,c=Ee({site:te(e,r),user:Ke(t.session),clientName:a||void 0,clientIdHost:j(i)?new URL(i).host:void 0,redirectUrl:t.redirectUrl,scopes:E,accessLifetimeHours:K/3600,rememberDays:n?ye:void 0,consentToken:await $e(t)});return new Response(c,{status:200,headers:V})})}function kr(r){return x(r,async(e,t)=>{const n=await e.req.formData(),i=n.get("consent");if(typeof i!="string"||!await Fe(i,t))return new Response(Me(te(e,r)),{status:403,headers:V});if(n.get("decision")==="allow"){const a=re(t);return a&&await ve(await r.getKv(),a),ee(e,r,t)}return Ge(e,t)})}function Be(r){return r instanceof Error&&[he,me,ge,Ce,Te].some(e=>r instanceof e)?{error:r.name,error_details:null}:r instanceof Error?{error:r.message,error_details:r.stack??null}:{error:String(r),error_details:null}}export{$ as SUPPORTED_MCP_GRANT_TYPES,Le as createMcpContextToken,gr as mcpAuthorizationHandler,Tr as mcpCallbackHandler,kr as mcpConsentHandler,mr as mcpDynamicClientRegistrationHandler,hr as mcpOAuthAuthorizationServerHandler,fr as mcpOAuthProtectedResourceHandler,Cr as mcpTokenPortalHandler,Z as resolveMcpIdpId,Ne as verifyAndParseMcpContextToken,Ue as verifyPkce};

package/dist/server/web-server/routes/mcp-routes/mcp-routes.d.ts

@@ -1,4 +0,0 @@
-import type { Hono } from 'hono';
-import type { Store } from '../../../store';
-export declare function installMcpRoutes(router: Hono, store: Store): void;
-//# sourceMappingURL=mcp-routes.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-routes.js

@@ -1 +0,0 @@
-import{corsMiddleware as A}from"../../middleware/corsMiddleware.js";import{ServerRoutes as i}from"../../../../constants/api.js";import{EntitlementsProvider as o}from"../../../entitlements/entitlements-provider.js";import{withPathPrefix as a}from"@redocly/theme/core/utils";import{AGENT_CARD_SLUG as l,A2A_SLUG as p,MCP_SERVER_CARD_SLUG as d}from"../../../../constants/common.js";import{mcpOAuthProtectedResourceHandler as _,mcpOAuthAuthorizationServerHandler as P,mcpDynamicClientRegistrationHandler as R,mcpAuthorizationHandler as M,mcpTokenPortalHandler as s,mcpCallbackHandler as t,mcpConsentHandler as C}from"./mcp-oauth.js";import{mcpServerCardHandler as E}from"./mcp-server-card.js";import{agentCardHandler as T}from"./agent-card.js";import{a2aHandler as H}from"./a2a.js";function B(n,e){const m=e.getConfig().mcp,c=o.instance().canAccessFeature("mcp");!m?.hide&&!m?.docs?.hide&&c&&(n.get(a(d),E(e)),n.get(a(l),T(e)),n.use(a(p),A({allowMethods:["POST"],exposeHeaders:["Link"]})),n.post(a(p),H(e)),n.get(`${i.MCP_OAUTH_PROTECTED_RESOURCE}${a("/mcp")}`,_(e)),n.get(i.MCP_OAUTH_AUTHORIZATION_SERVER,P(e)),n.post(a(i.MCP_DYNAMIC_CLIENT_REGISTRATION),R(e)),n.get(a(i.MCP_AUTHORIZATION),M(e)),n.post(a(i.MCP_TOKEN_PORTAL),s(e)),n.get(a(i.MCP_CALLBACK),t(e)),n.get(a(`${i.MCP_CALLBACK}/*`),t(e)),n.post(a(i.MCP_CALLBACK),C(e)),n.post(a(`${i.MCP_CALLBACK}/*`),C(e)))}export{B as installMcpRoutes};

package/dist/server/web-server/routes/mcp-routes/mcp-server-card.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../../store';
-export declare function mcpServerCardHandler(store: Store): Handler;
-//# sourceMappingURL=mcp-server-card.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-server-card.js

@@ -1 +0,0 @@
-import{combineUrls as b,withPathPrefix as u}from"@redocly/theme/core/utils";import{DEFAULT_DOCS_MCP_SERVER_NAME as S,MCP_PROTOCOL_VERSION as T}from"../../../plugins/mcp/constants.js";import{RESERVED_ROUTES as g}from"../../../plugins/get-reserved-routes.js";import{isMcpCodeModeEnabled as v}from"../../../plugins/mcp/utils/mode.js";import{CODE_MODE_TOOL_NAMES as M,FETCH_TOOL_NAME as O}from"../../../plugins/mcp/codemode/constants.js";import{EXECUTE_TOOL_SCHEMA as R}from"../../../plugins/mcp/codemode/tools/execute-schema.js";import{describeToolsSchema as L}from"../../../plugins/mcp/codemode/tools/describe-tools.js";import{normalizeToolDisplayName as y}from"../../../plugins/mcp/utils/tool-registration.js";import{buildCodeModeInstructions as D,buildExecuteDescription as I}from"../../../plugins/mcp/codemode/prompts.js";import{toToolListEntries as P}from"../../../plugins/mcp/codemode/build-tool-list.js";import{composeExecuteAnnotations as U}from"../../../plugins/mcp/codemode/capabilities/index.js";import{ALL_CAPABILITIES as V}from"../../../plugins/mcp/codemode/capabilities/registry.js";import{isGatewayCapabilityEnabled as H}from"../../../plugins/mcp/gateway-mcp/eligibility.js";import{shouldHandleMcpAuth as x}from"../../../utils/rbac/should-handle-mcp-auth.js";import{resolvePublicBaseUrl as N}from"../../../web-server/utils/resolve-public-base-url.js";import{telemetryTraceStep as w}from"../../../telemetry/helpers/trace-step.js";import{MCP_AUTH_SCHEMES as j}from"./constants.js";const k="https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",q="1.0";function ne(r){const n=v(),C=new Date().toISOString().slice(0,10);return async m=>await w("com.redocly.mcpServerCard.served",async e=>{e?.setAttribute("id","mcpServerCardId"),e?.setAttribute("object","mcpServerCard"),e?.setAttribute("uri","urn:redocly:realm:api:mcpServerCard:mcpServerCardId");const o=r.getConfig(),a=o.mcp?.docs?.name||S,i=r.getMcpTools().filter(t=>!M.has(t.name)&&!t.hasAvailabilityGate),s=H(o.mcp)?[...V]:[],l=s.some(t=>t.id===O),d=P(i,s),c=(n?[{...R,description:I(l,d),annotations:U(i,s)},L(i,s)]:i).map(y).map(({name:t,title:f,description:h,schema:_,annotations:A})=>({name:t,title:f,description:h,inputSchema:_,annotations:A})),E=o.skills?.hide===!0?[]:r.getSkills(),p={$schema:k,version:q,protocolVersion:T,serverInfo:{name:a,title:a,version:C},description:o.seo?.description,documentationUrl:b(N(r,m),u("/")),transport:{type:"streamable-http",endpoint:u(g.mcp)},capabilities:{logging:{},tools:{listChanged:!0},...E.length>0?{resources:{listChanged:!0},completions:{}}:{}},authentication:x(!!o.access?.requiresLogin,o.access?.rbac)?{required:!0,schemes:j}:void 0,instructions:n?D(l,d):void 0,tools:c.length>0?c:["dynamic"]};return e?.setAttribute("mode",n?"code":"tools"),e?.setAttribute("toolsCount",c.length),e?.setAttribute("authRequired",p.authentication!==void 0),m.json(p,200,{"Access-Control-Allow-Origin":"*","Cache-Control":"public, max-age=3600"})})}export{ne as mcpServerCardHandler};

package/dist/server/web-server/routes/mcp-routes/types.d.ts

@@ -1,34 +0,0 @@
-export type AgentExtension = {
-    uri: string;
-    description?: string;
-    required?: boolean;
-    params?: Record<string, unknown>;
-};
-export type AgentCard = {
-    name: string;
-    description: string;
-    url: string;
-    version: string;
-    protocolVersion: '0.3.0';
-    preferredTransport: 'HTTP+JSON';
-    provider?: {
-        organization: string;
-        url: string;
-    };
-    documentationUrl?: string;
-    capabilities: {
-        streaming: boolean;
-        pushNotifications: boolean;
-        extensions?: AgentExtension[];
-    };
-    defaultInputModes: string[];
-    defaultOutputModes: string[];
-    skills: Array<{
-        id: string;
-        name: string;
-        description: string;
-        tags: string[];
-        url: string;
-    }>;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/server/web-server/routes/mcp-routes/utils/build-agent-card.d.ts

@@ -1,10 +0,0 @@
-import type { SeoConfig } from '@redocly/config';
-import type { Skill } from '../../../../types/plugins/skills.js';
-import type { AgentCard } from '../types.js';
-export declare function buildAgentCard({ seo, baseUrl, skills, mcpAuthRequired, }: {
-    seo: SeoConfig | undefined;
-    baseUrl: string;
-    skills: Skill[];
-    mcpAuthRequired: boolean;
-}): AgentCard;
-//# sourceMappingURL=build-agent-card.d.ts.map

package/dist/server/web-server/routes/mcp-routes/utils/build-agent-card.js

@@ -1 +0,0 @@
-import{combineUrls as e,withPathPrefix as i}from"@redocly/theme/core/utils";import{DEFAULT_TITLE as s}from"../../../../constants/common.js";import{getSkillUrl as T}from"../../../../utils/skills/get-skill-url.js";import{A2A_SLUG as E}from"../../../../../constants/common.js";import{A2A_CAPABILITIES as m,A2A_DEFAULT_DESCRIPTION as u,A2A_DEFAULT_INPUT_MODES as d,A2A_DEFAULT_OUTPUT_MODES as a,A2A_PREFERRED_TRANSPORT as c,A2A_PROTOCOL_VERSION as P,AGENT_CARD_VERSION as l,MCP_AUTH_SCHEMES as I,MCP_ENDPOINT_PATH as O,MCP_EXTENSION_URI as S}from"../constants.js";function U({seo:r,baseUrl:o,skills:n,mcpAuthRequired:A}){const _=e(o,i(E)),p=e(o,i("/"));return{name:r?.title||r?.projectTitle||s,description:r?.description||u,url:_,documentationUrl:p,version:l,protocolVersion:P,preferredTransport:c,capabilities:{...m,extensions:[{uri:S,description:"Model Context Protocol server exposing the documentation tools and skills.",params:{url:e(o,i(O)),...A?{authentication:{required:!0,schemes:I}}:{}}}]},defaultInputModes:d,defaultOutputModes:a,skills:n.map(t=>({id:t.slug,name:t.name,description:t.description,tags:t.tags,url:T(o,t.slug)}))}}export{U as buildAgentCard};

package/dist/server/web-server/routes/otel/otel.d.ts

@@ -1,5 +0,0 @@
-import { AsyncApiRealmAPI } from '@redocly/realm-asyncapi-sdk';
-import type { Context } from 'hono';
-export declare function otelTracesHandler(ctx: Context): Promise<Response>;
-export declare function toActor(userId: string | undefined, sessionId: string): AsyncApiRealmAPI.cloudEvents.CloudEventActor;
-//# sourceMappingURL=otel.d.ts.map

package/dist/server/web-server/routes/otel/otel.js

@@ -1 +0,0 @@
-import{AsyncApiRealmAPI as N}from"@redocly/realm-asyncapi-sdk";import{getAttributesStringValue as _,mergeAttributes as R,toAttribute as h}from"./otlp.js";import{envConfig as o}from"../../../config/env-config.js";import{getClientIp as O}from"../../utils/get-client-ip.js";const C=o.OTEL_TRACES_URL||"https://otel.cloud.redocly.com/v1/traces",v="cloudevents.event_session_id";class w extends N.OtelClient{initTracer(){}}let d=null;function E(){return d||(d=new w,d.init({collectorTraceUrl:void 0,serviceName:"realm-ui",serviceVersion:"1.0",isProd:o.isProductionEnv,version:"1.0",tracerName:"attribute-processor"})),d}async function k(e){const t=await e.req.json();return t.resourceSpans?.length&&(P(t,L(e)),await fetch(C,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})),e.newResponse(null,200)}function P(e,t){for(const s of e.resourceSpans){const r=s.resource.attributes.find(u=>u.key==="session_id");if(!r)continue;const i=_(r);if(!i)continue;const l=U(t.userId,i),p=new Date,g={organizationId:o.ORGANIZATION_ID||"",organizationSlug:o.ORGANIZATION_SLUG||"",projectId:o.PROJECT_ID||"",projectSlug:o.PROJECT_SLUG||"",env:o.REDOCLY_ENV||"",source:"urn:redocly:realm:ui",actor:{id:l.id,object:l.object,uri:l.uri},clientIp:t.clientIp,userAgent:t.userAgent},c=(u,n)=>{const a=u.attributes.find(f=>f.key===n);return a?_(a):""};for(const u of s.scopeSpans)for(const n of u.spans){if(!n.name.startsWith("event.")||n.name==="event.undefined")continue;const a=c(n,"cloudevents.event_spec_version"),f=c(n,"cloudevents.event_object"),b=c(n,"cloudevents.event_data_content_type"),S=c(n,"cloudevents.event_origin"),m=c(n,"cloudevents.event_time"),I=m?new Date(m):p,A=Number.isNaN(I.getTime())?p:I,T={...g,id:c(n,"cloudevents.event_id"),specversion:a,type:n.name.slice(6),object:f,datacontenttype:b,time:A,origin:S},y=E().processAttributes(T,A);R(n,y,{overwrite:!0}),j(n,t.sessionId)}}}function j(e,t){const s=e.attributes.findIndex(i=>i.key===v),r=h(v,t);r?s===-1?e.attributes.push(r):e.attributes[s]=r:s!==-1&&e.attributes.splice(s,1)}function L(e){const t=e.get("auth")?.claims?.id||e.get("auth")?.claims?.sub,s=e.get("auth")?.claims?.sessionId,r=O(e.req.raw)||e.req.raw.context?.remoteAddr?.hostname,i=e.req.raw.headers.get("user-agent");return{userId:t,sessionId:s||void 0,clientIp:r??void 0,userAgent:i??void 0}}function U(e,t){if(e)return{id:e,object:"user",uri:`${o.MAIN_API_URL}/users/${e}`};const s=t.replace("ses_","ann_");return{id:s,object:"anonymous",uri:`${o.MAIN_API_URL}/anonymous/${s}`}}export{k as otelTracesHandler,U as toActor};

package/dist/server/web-server/routes/otel/otlp.d.ts

@@ -1,41 +0,0 @@
-export type Traces = {
-    resourceSpans: ResourceSpan[];
-};
-export type ResourceSpan = {
-    resource: Resource;
-    scopeSpans: ScopeSpan[];
-};
-export type Resource = {
-    attributes: Attribute[];
-};
-export type ScopeSpan = {
-    spans: Span[];
-};
-export type Span = {
-    name: string;
-    startTimeUnixNano: string;
-    endTimeUnixNano: string;
-    attributes: Attribute[];
-};
-export type Attribute = StringAttribute | IntAttribute;
-export type StringAttribute = {
-    key: string;
-    value: {
-        stringValue: string;
-    };
-};
-export type IntAttribute = {
-    key: string;
-    value: {
-        intValue: number;
-    };
-};
-export type OptionalAttribute = Attribute | undefined;
-export type EventAttribute = Map<string, Attribute>;
-export declare function toAttribute(key: string, value: number | string | undefined | null): OptionalAttribute;
-export declare function mergeAttributes(span: Span, attrs: Record<string, string | number | null | undefined>, { overwrite }?: {
-    overwrite?: boolean;
-}): void;
-export declare function getAttributesStringValue(attr: Attribute): string;
-export declare function getAttributesIntValue(attr?: Attribute): number | undefined;
-//# sourceMappingURL=otlp.d.ts.map

package/dist/server/web-server/routes/otel/otlp.js

@@ -1 +0,0 @@
-function f(e,n){if(n!=null)return typeof n=="number"?{key:e,value:{intValue:n}}:{key:e,value:{stringValue:n}}}function l(e,n,{overwrite:o=!1}={}){for(const[u,i]of Object.entries(n)){const r=e.attributes.findIndex(t=>t.key===u);if(r!==-1){if(!o)continue;const t=f(u,i);t&&(e.attributes[r]=t)}else{const t=f(u,i);t&&e.attributes.push(t)}}}function s(e){return"stringValue"in e.value?e.value.stringValue:""}function a(e){if(e?.value&&typeof e.value=="object"&&"intValue"in e.value)return e.value.intValue}export{a as getAttributesIntValue,s as getAttributesStringValue,l as mergeAttributes,f as toAttribute};

package/dist/server/web-server/routes/page-data.d.ts

@@ -1,6 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../store';
-import type { RouteDataResolver } from './index';
-export declare function pageDataHandler(store: Store, resolveRouteData: RouteDataResolver): Handler;
-export declare function sharedPageDataHandler(store: Store): Handler;
-//# sourceMappingURL=page-data.d.ts.map

package/dist/server/web-server/routes/page-data.js

@@ -1 +0,0 @@
-import{MCP_ROUTE as y,PUBLIC_MCP_ROUTE as $}from"@redocly/theme/core/constants/mcp";import{ServerRoutes as w}from"../../../constants/api.js";import{DEV_LOGIN_SLUG as M}from"../../../constants/common.js";import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as a,DEFAULT_TITLE as F}from"../../constants/common.js";import{findInIterable as N}from"../../../utils/collection/find-in-iterable.js";import{removeTrailingSlash as B}from"../../../utils/url/remove-trailing-slash.js";import{envConfig as b}from"../../config/env-config.js";import{canAccessResource as q,filterDataByAccessDeep as T,isResourcePubliclyAccessible as H}from"../../utils/rbac.js";import{getServerProps as G}from"../../ssr/index.js";import{readSharedData as V}from"../../utils/index.js";import{getRedirectLoginUrl as W}from"../utils/get-redirect-login-url.js";import{processRedirects as k}from"./helpers/process-redirects.js";import{removeErrorDetails as K}from"../utils/remove-error-details.js";import{telemetry as z}from"../../telemetry/index.js";import{MCP_NOT_ALLOWED_TEMPLATE_ID as J}from"../../constants/mcp.js";function pe(e,n){return async(t,g)=>{const p=t.get("logger"),{req:m}=t,{pathname:d}=new URL(m.url),{seo:f,ssoDirect:h}=e.getConfig(),i=f?.title||F;if(e?.compilationErrors?.length&&b.isDevelopMode)return t.json({templateId:"compilation-error",props:{compilationErrors:e?.compilationErrors},sharedDataIds:{}},500,{"Cache-Control":a});const u=d.match(/page-data(.*)data.json$/);if(!u)return g();const c=decodeURI(u[1]),r=c==="/index/"?"/":B(c),o=e.getRouteBySlug(r,{followRedirect:!1})||N(e.routesBySlug.values(),s=>s.hasClientRoutes&&c.startsWith(s.slug+"/"));if(c===w.OIDC_CALLBACK+"/")return t.json({templateId:"403OIDC",sharedDataIds:{},props:{seo:{title:`${i} - Forbidden`}}},200,{"Cache-Control":a});const{isAuthenticated:C,teams:D,claims:{name:_,picture:P,email:I}}=t.get("auth"),R={isAuthenticated:C,email:I,teams:D},l={isAuthenticated:C,name:_,picture:P,email:I,teams:D};if((r===y||r===$&&!!e.globalData.mcpData?.docs?.publicEndpoint)&&e.globalData.mcpData?.docs?.enabled)return t.json({templateId:J,sharedDataIds:{},props:{},userData:l},405,{"Cache-Control":a});const E=e.getRedirect(r);if(E){const s=k({redirect:E}).location;return z.sendRedirectMessage([{id:r,object:"redirect",uri:`urn:redocly:realm:api:redirect:${r}`,from:r,templateId:"404"}]),t.json({templateId:"404",redirectTo:s,sharedDataIds:{},props:{}},301,{"Cache-Control":a})}if(!o){const s=e.getRouteBySlug(r,{followRedirect:!0});return p.error(`Page not found: ${d}`),t.json({templateId:"404",redirectTo:s?.slug,sharedDataIds:{},props:{seo:{title:`${i} - Not Found`}},userData:l},404,{"Cache-Control":a})}if(p.verbose(`Page viewed: ${o.slug}`),!q(o,R,e.config.access?.rbac,e.config.access?.requiresLogin)&&o.slug!==M){if(C)return t.json({templateId:"403",sharedDataIds:{},props:{seo:{title:`${i} - Forbidden`}},userData:l},403,{"Cache-Control":a});const s=Object.keys(h||{}).length>0;return t.json({templateId:"404",sharedDataIds:{},props:{seo:{title:`${i} - Not Found`}},userData:l,...s?{redirectTo:W(e,o.slug)}:{}},s?401:404,{"Cache-Control":a})}const j=T(o.versions,R,e.config.access?.rbac,e.config.access?.requiresLogin),A=e.routesSharedData.get(o.slug)||{},S=await n(o),v=await G(o,t,S,e),{sharedDataIds:O,...L}=v,U={templateId:o.templateId,versions:j,sharedDataIds:{...A,...O||{}},props:b.isProductionEnv?K(L):L,slug:o.slug,userData:l,isPublic:H(o,e.config)};return t.json(U,200,{"Cache-Control":a})}}function me(e){return async(n,t)=>{const g=n.get("logger"),{req:p}=n,{pathname:m}=new URL(p.url),d=m.match(/\/page-data\/shared\/(.*)\.json/);if(!d)return t();const f=decodeURIComponent(d[1]),h=await V(f,e.outdir),{isAuthenticated:i,teams:u,claims:{email:c}}=n.get("auth"),r=T(h,{isAuthenticated:i,email:c,teams:u},e.config.access?.rbac,e.config.access?.requiresLogin);return r?n.json(r,200,{"Cache-Control":a}):(g.error(`Shared data not found: ${m}`),n.text("Not Found",404,{"Cache-Control":a}))}}export{pe as pageDataHandler,me as sharedPageDataHandler};

package/dist/server/web-server/routes/path-prefix-redirect.d.ts

@@ -1,3 +0,0 @@
-import type { Context, Next } from 'hono';
-export declare function pathPrefixRedirectHandler(ctx: Context, next: Next): Promise<Response | undefined>;
-//# sourceMappingURL=path-prefix-redirect.d.ts.map

package/dist/server/web-server/routes/path-prefix-redirect.js

@@ -1 +0,0 @@
-import{getPathPrefix as i}from"@redocly/theme/core/utils";import{envConfig as a}from"../../config/env-config.js";async function p(e,r){const t=new URL(e.req.url),n=i(),o=a.isProductionEnv?301:302;if(n&&t.pathname==="/")return e.newResponse(null,o,{Location:n});await r()}export{p as pathPrefixRedirectHandler};

package/dist/server/web-server/routes/replay-oauth2-redirect.d.ts

@@ -1,3 +0,0 @@
-import type { Context } from 'hono';
-export declare function replayOauth2RedirectCallbackHandler(ctx: Context): Promise<Response>;
-//# sourceMappingURL=replay-oauth2-redirect.d.ts.map

package/dist/server/web-server/routes/replay-oauth2-redirect.js

@@ -1,130 +0,0 @@
-async function r(e){return e.html(`
-    <!DOCTYPE html>
-      <html lang="en">
-        <head>
-          <meta charset="utf-8" />
-          <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
-          <title>Redocly Redoc: OAuth2 Redirect</title>
-      
-          <style>
-            .user-info {
-              margin: 150px auto auto;
-              width: 50%;
-              background-color: whitesmoke;
-              padding: 20px;
-              text-align: center;
-            }
-          </style>
-        </head>
-      
-        <body>
-          <script>
-            const d = "Something went wrong, please, try again.";
-            function h(r) {
-              return r && r.replace(/=+$/, "");
-            }
-            function w(r, e) {
-              return !!r && !!e && h(r) === h(e);
-            }
-            const m = {
-              invalid_request: "The request is missing a required parameter, includes an unsupported parameter value (other than grant type), repeats a parameter, includes multiple credentials, utilizes more than one mechanism for authenticating the client, or is otherwise malformed.",
-              invalid_client: "Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method).",
-              invalid_grant: "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.",
-              unauthorized_client: "The authenticated client is not authorized to use this authorization grant type.",
-              unsupported_grant_type: "The authorization grant type is not supported by the authorization server.",
-              invalid_scope: "The requested scope is invalid, unknown, malformed, or exceeds the scope granted by the resource owner.",
-              // Authorization endpoint errors (from RFC 6749 Section 4.1.2.1)
-              unsupported_response_type: "The requested response type is not supported by the authorization server.",
-              access_denied: "The resource owner or authorization server denied the request.",
-              // Token endpoint errors (from RFC 6749 Section 5.2)
-              server_error: "The authorization server encountered an unexpected condition.",
-              temporarily_unavailable: "The authorization server is currently unable to handle the request due to a temporary overloading or maintenance."
-            };
-            class i extends Error {
-              error;
-              error_description;
-              constructor({
-                message: e,
-                error: t,
-                error_description: n
-              }) {
-                const o = n || t && m[t] || t || e || d;
-                super(o), this.name = "OAuth2Error", this.error = t, this.error_description = n;
-              }
-              static fromJsonData(e) {
-                return new i({
-                  error: e.error,
-                  error_description: e.error_description
-                });
-              }
-              static fromTextData(e) {
-                return new i({
-                  message: e
-                });
-              }
-              static fromError(e) {
-                return new i({
-                  error: e.message
-                });
-              }
-            }
-            function y(r, e) {
-              let t;
-              const n = e ? new URL(e) : window.location;
-              if (/code|token|error/.test(n.hash) ? t = n.hash.substring(1) : t = n.search.substring(1), !t)
-                throw console.error("No query string in OAuth 2 redirect URL"), new i({ message: d });
-              const o = new URLSearchParams(t), s = o.get("access_token"), a = o.get("code"), c = o.get("token_type"), l = o.get("expires_in"), p = o.get("state"), u = o.get("error"), g = o.get("error_description");
-              if (u)
-                throw new i({
-                  error: u,
-                  error_description: g ?? void 0
-                });
-              if (!w(p, r?.state))
-                throw new Error("Outdated OAuth2 state");
-              if (r?.flow === "implicit") {
-                if (!s)
-                  throw new Error(
-                    \`Your OAuth2 authentication service provider redirected you without an "access_token".
-            Please, try again or make sure your OAuth2 settings are correct.\`
-                  );
-                if (!c)
-                  throw new Error(
-                    \`Your OAuth2 authentication service provider redirected you without a "token_type".
-            Please, try again or make sure your OAuth2 settings are correct.\`
-                  );
-                r?.successCallback({
-                  access_token: s,
-                  token_type: c,
-                  expires_in: l,
-                  auth_code: ""
-                });
-              }
-              if (r?.flow === "authorizationCode") {
-                if (!a)
-                  throw new Error(
-                    \`Your OAuth2 authentication service provider redirected you without authorization "code".
-            Please, try again or make sure your OAuth2 settings are correct.\`
-                  );
-                r?.successCallback({
-                  auth_code: a,
-                  access_token: "",
-                  token_type: "bearer"
-                });
-              }
-            }
-            function n() {
-              const r = window.opener?.redirectOAuth2;
-              try {
-                y(r);
-              } catch (o) {
-                r?.errorCallback(o);
-              }
-              window.close();
-            }
-            window.onload = n;
-          </script>
-      
-          <noscript> You need to enable JavaScript to run this app. </noscript>
-        </body>
-      </html>
-    `)}export{r as replayOauth2RedirectCallbackHandler};

package/dist/server/web-server/routes/resolve-route.d.ts

@@ -1,7 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../store';
-export declare function resolveSlugHandler(store: Store): Handler;
-export declare function resolvePathsHandler(store: Store): Handler;
-export declare function resolvePathHandler(store: Store): Handler;
-export declare function getRoutesByLineHandler(store: Store): Handler;
-//# sourceMappingURL=resolve-route.d.ts.map

package/dist/server/web-server/routes/resolve-route.js

@@ -1 +0,0 @@
-import{Source as P}from"@redocly/openapi-core";import y from"node:fs/promises";import S from"node:path";import{withPathPrefix as j,getPathPrefix as h,combineUrls as w}from"@redocly/theme/core/utils";import{API_DOCS_SHARED_DATA_PREFIX as d}from"../../constants/plugins/api-docs.js";import{CATALOG_BASE_SLUG as b,CATALOG_SLUGS as $}from"../../../constants/catalog-entities.js";import{CATALOG_ENTITIES_FILES_REGEX as I}from"../../constants/plugins/catalog-entities.js";import{removeTrailingSlash as E}from"../../../utils/url/remove-trailing-slash.js";import{normalizeRouteSlug as N}from"../../../utils/path/normalize-route-slug.js";import{promiseMapLimit as T}from"../../utils/async/promise-map-limit.js";import{getRoutesByLines as L,getPointerPosition as U}from"../../plugins/api-docs/utils/ast-utils.js";import{readSharedData as m}from"../../utils/index.js";const q=new Set(["openapi","asyncapi"]);function K(n){return async t=>{const i=await t.req.json(),r=decodeURI(E(i.split("?")[0])),[o]=r.split("#"),g=h(),f=N(o.slice(g.length)),u=f.startsWith(b)?b:f,e=n.getRouteBySlug(u);if(e){const p=n.getRouteByFsPath(e.fsPath);if(p?.metadata?.type&&q.has(p.metadata.type)){const a=await m(`${d}${e.fsPath}`,n.outdir);if(!a?.routesMapping)return t.json({route:e},200);const s=Object.keys(a.routesMapping).find(c=>w(e.baseSlug,a.routesMapping[c])===r);if(!a.sourcePath)return t.json({route:e},200);let l;if(s){const c=S.join(n.contentDir,e.fsPath),R=await y.readFile(c,"utf-8"),_=new P(c,R);l=U(s,_)}return t.json({route:{fsPath:e.fsPath,pointer:s,position:l}},200)}if(p?.metadata?.type==="graphql"){const a=await m(`${d}${e.fsPath}`,n.outdir);if(!a?.graphqlPositions)return t.json({route:e},200);const s=Object.keys(a.graphqlPositions).find(c=>w(e.baseSlug,c)===r),l=s?a.graphqlPositions[s].position:void 0;return t.json({route:{fsPath:e.fsPath,position:l}},200)}}return t.json({route:e},200)}}function X(n){return async t=>{const i=await t.req.json(),r=await T(i,5,async o=>A(o,n));return t.json({routes:r},200)}}function Y(n){return async t=>{const i=await t.req.json(),r=await A(i,n);return t.json(r,200)}}function J(n){return async t=>{const i=(t.req.query("lines")||"").split(",").map(f=>parseInt(f)),r=t.req.query("file");if(!r)return t.json("No data",400);const o=await m(`${d}${r}`,n.outdir),g=S.join(n.contentDir,r);try{const f=await y.readFile(g,"utf-8");if(!o)return t.json("No data",400);const u=new P(g,f),e=L(i,u,o.routesMapping,o.baseSlug);return t.json(e,200)}catch{return t.json("No data",400)}}}async function A(n,t){const[i,r]=n.split(":");if(I.test(i))return{route:{slug:`${b}/${$.ALL}`}};let o=t.getRouteByFsPath(i);if(o?.metadata?.type&&q.has(o.metadata.type)){const u=await m(`${d}${i}`,t.outdir);if(u?.sourcePath){const e=S.join(t.contentDir,o.fsPath),p=await y.readFile(e,"utf-8"),a=new P(e,p),s=L([parseInt(r,10)],a,u.routesMapping,o.baseSlug);if(s.length)return{route:{slug:h()?j(s[0]):s[0],filePath:n}}}}if(o?.metadata?.type==="graphql"){const u=await m(`${d}${i}`,t.outdir),e=parseInt(r,10);if(u?.sourcePath&&u.graphqlPositions&&!Number.isNaN(e)){let p,a=1/0;for(const[s,{startLine:l,endLine:c}]of Object.entries(u.graphqlPositions))l<=e&&e<=c&&c-l<a&&(a=c-l,p=s);if(p){const s=w(o.baseSlug,p);return{route:{slug:h()?j(s):s,filePath:n}}}}}const g=o?.slug?h()?j(o?.slug):o?.slug:"";return{route:{...o,pageName:o?await o?.getNavText?.():"",slug:g,filePath:n}}}export{J as getRoutesByLineHandler,Y as resolvePathHandler,X as resolvePathsHandler,K as resolveSlugHandler};

package/dist/server/web-server/routes/search.d.ts

@@ -1,7 +0,0 @@
-import type { Env, Handler } from 'hono';
-import type { Store } from '../../store';
-import type { SearchRequestParams, FacetCountsRequestParams } from '../../../types/index.js';
-import type { ValidatedJsonInput } from '../../types';
-export declare function searchHandler(store: Store): Handler<Env, string, ValidatedJsonInput<SearchRequestParams>>;
-export declare function searchFacetsHandler(store: Store): Handler<Env, string, ValidatedJsonInput<FacetCountsRequestParams>>;
-//# sourceMappingURL=search.d.ts.map

package/dist/server/web-server/routes/search.js

@@ -1 +0,0 @@
-import{telemetryTraceStep as b}from"../../telemetry/helpers/trace-step.js";import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as C}from"../../constants/common.js";import{expandTeamsForRead as E}from"../../utils/rbac.js";function v(t){return async s=>(s.header("Cache-Control",C),await b("com.redocly.search.performed",async e=>{e?.setAttribute("id","searchQueryId"),e?.setAttribute("object","searchQuery"),e?.setAttribute("uri","urn:redocly:realm:api:searchQuery:searchQueryId");const i=s.get("logger"),r=s.get("auth"),d=i.startTiming(),a=t.getConfig().access?.requiresLogin&&!r.isAuthenticated,u=s.req.valid("json");e?.setAttribute("engine",t?.searchEngine?.type),e?.setAttribute("query",u.query||""),e?.setAttribute("user",r.claims.email??"anonymous"),e?.setAttribute("noAccess",a);const l=t.getSearchFacets(),o=a?{}:t.searchEngine?await t.searchEngine.search(u,{...r,teams:E(t.config.access?.rbac,r.teams)},l):{};let h=0;if(Object.keys(o).length){const g=o.documents;for(const[c,n]of Object.entries(g))h+=n.length}return i.infoTime(d,`Search with query "${u.query||""}". Total results: ${h}`),e?.setAttribute("resultsCount",h),s.json(o)}))}function p(t){return async s=>(s.header("Cache-Control",C),await b("com.redocly.search.facets",async e=>{e?.setAttribute("id","searchFacetsId"),e?.setAttribute("object","searchFacets"),e?.setAttribute("uri","urn:redocly:realm:api:searchFacets:searchFacetsId");const i=s.get("logger"),r=s.get("auth"),m=t.getConfig().access?.requiresLogin&&!r.isAuthenticated,a=s.req.valid("json");e?.setAttribute("engine",t?.searchEngine?.type),e?.setAttribute("user",r.claims.email??"anonymous"),e?.setAttribute("noAccess",m);const u=i.startTiming(),l=t.getSearchFacets(),o=m?{}:t.searchEngine?await t.searchEngine.countFacets(a,r,l):{},h=!!a.field;let g=[];if(h){const c=a.field,n=c&&l.get(c);if(n){const f={...n};f.values=o?.[c]||[],g.push(f)}}else{const c=new Map;for(const[n,f]of l){const y=o?.[n],A={...f};A.values=y||f.values.map(T=>({value:T,count:0})),c.set(n,A)}g=Array.from(c,([,n])=>n)}return i.verboseTime(u,"Search facets"),s.json(g)}))}export{p as searchFacetsHandler,v as searchHandler};

package/dist/server/web-server/routes/semantic-search.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../store';
-export declare function semanticSearchHandler(store: Store): Handler;
-//# sourceMappingURL=semantic-search.d.ts.map

package/dist/server/web-server/routes/semantic-search.js

@@ -1 +0,0 @@
-import{withPathPrefix as p}from"@redocly/theme/core/utils";import{SEMANTIC_SEARCH_API_URL as s}from"../../constants/common.js";import{fetchWithClient as d}from"../../utils/fetch-with-client.js";import{handleUnauthorizedApiRequest as h}from"../utils.js";function y(i){return async e=>{if(!s)return e.newResponse(null,404);const n=e.get("auth");if(i.getConfig().access?.requiresLogin&&!n.isAuthenticated)return h(e);const o={"Content-Type":"application/json"};n.idpAccessToken&&(o.Cookie=`accessToken=${n.idpAccessToken}`);const a=await e.req.json();try{const t=await d(s,{method:"POST",body:JSON.stringify(a),headers:o});if(t.ok){const u=(await t.json()).documents.map(r=>({...r,url:p(r.url)}));return e.json(u)}const c=await t.text();return e.newResponse(c,t.status,{"Content-Type":"application/json"})}catch(t){return e.json({error:"Failed to fetch semantic search results",details:String(t)},500)}}}export{y as semanticSearchHandler};

package/dist/server/web-server/routes/skills/build-skills-index.d.ts

@@ -1,4 +0,0 @@
-import type { Skill } from '../../../types/plugins/skills.js';
-import type { SkillsIndex } from './types.js';
-export declare function buildSkillsIndex(skills: Skill[], baseUrl: string): SkillsIndex;
-//# sourceMappingURL=build-skills-index.d.ts.map

package/dist/server/web-server/routes/skills/build-skills-index.js

@@ -1 +0,0 @@
-import{getSkillUrl as t}from"../../../utils/skills/get-skill-url.js";import{SKILLS_INDEX_SCHEMA_URL as m}from"./constants.js";function d(i,r){return{$schema:m,skills:i.map(e=>({name:e.name,type:"skill-md",description:e.description,url:t(r,e.slug),digest:e.digest}))}}export{d as buildSkillsIndex};

package/dist/server/web-server/routes/skills/constants.d.ts

@@ -1,4 +0,0 @@
-export declare const SKILLS_INDEX_SCHEMA_URL = "https://schemas.agentskills.io/discovery/0.2.0/schema.json";
-export declare const SKILLS_INDEX_FILENAME = "index.json";
-export declare const SKILLS_INDEX_SLUG = "/.well-known/agent-skills/index.json";
-//# sourceMappingURL=constants.d.ts.map

package/dist/server/web-server/routes/skills/constants.js

@@ -1 +0,0 @@
-import{AGENT_SKILLS_BASE as o}from"../../../../constants/common.js";const S="https://schemas.agentskills.io/discovery/0.2.0/schema.json",s="index.json",t=`${o}/${s}`;export{s as SKILLS_INDEX_FILENAME,S as SKILLS_INDEX_SCHEMA_URL,t as SKILLS_INDEX_SLUG};

package/dist/server/web-server/routes/skills/skill-markdown.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../../store.js';
-export declare function skillMarkdownHandler(store: Store): Handler;
-//# sourceMappingURL=skill-markdown.d.ts.map

package/dist/server/web-server/routes/skills/skill-markdown.js

@@ -1 +0,0 @@
-import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as c}from"../../../constants/common.js";import{telemetryTraceStep as a}from"../../../telemetry/helpers/trace-step.js";import{canAccessSkill as u}from"../../../utils/skills/can-access-skill.js";import{MIME_TYPES as m}from"../../mime-types.js";import{getContentTypeHeaderValue as g}from"../../utils/content-type.js";function y(n){return async e=>await a("com.redocly.agentSkill.served",async t=>{t?.setAttribute("object","agentSkill");const r=e.req.param("slug")??"";if(t?.setAttribute("id",r),t?.setAttribute("uri",`urn:redocly:realm:api:agentSkill:${r}`),t?.setAttribute("skill",r),n.config.skills?.hide===!0)return e.newResponse(null,404);const s=n.skills.get(r),{isAuthenticated:i,teams:l,claims:{email:o}}=e.get("auth");return s&&u(s,{isAuthenticated:i,teams:l,email:o},n.config.access?.rbac,n.config.access?.requiresLogin)?e.newResponse(s.content,200,{"Content-Type":g(m[".md"]),"Cache-Control":c,"Access-Control-Allow-Origin":"*"}):e.newResponse(null,404)})}export{y as skillMarkdownHandler};

package/dist/server/web-server/routes/skills/skills-index.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../../store.js';
-export declare function skillsIndexHandler(store: Store): Handler;
-//# sourceMappingURL=skills-index.d.ts.map

package/dist/server/web-server/routes/skills/skills-index.js

@@ -1 +0,0 @@
-import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as o}from"../../../constants/common.js";import{telemetryTraceStep as u}from"../../../telemetry/helpers/trace-step.js";import{getAccessibleSkills as a}from"../../../utils/skills/get-accessible-skills.js";import{resolvePublicBaseUrl as c}from"../../utils/resolve-public-base-url.js";import{buildSkillsIndex as d}from"./build-skills-index.js";function f(e){return async l=>await u("com.redocly.agentSkillsIndex.served",async i=>{if(i?.setAttribute("id","agentSkillsIndexId"),i?.setAttribute("object","agentSkillsIndex"),i?.setAttribute("uri","urn:redocly:realm:api:agentSkillsIndex:agentSkillsIndexId"),e.config.skills?.hide===!0)return i?.setAttribute("skillsCount",0),l.newResponse(null,404);const{isAuthenticated:s,teams:n,claims:{email:r}}=l.get("auth"),t=a(e.getSkills(),{isAuthenticated:s,teams:n,email:r},e.config.access?.rbac,e.config.access?.requiresLogin);return i?.setAttribute("skillsCount",t.length),l.json(d(t,c(e,l)),200,{"Cache-Control":o,"Access-Control-Allow-Origin":"*"})})}export{f as skillsIndexHandler};

package/dist/server/web-server/routes/skills/skills-routes.d.ts

@@ -1,4 +0,0 @@
-import type { Hono } from 'hono';
-import type { Store } from '../../../store.js';
-export declare function installSkillsRoutes(router: Hono, store: Store): void;
-//# sourceMappingURL=skills-routes.d.ts.map

package/dist/server/web-server/routes/skills/skills-routes.js

@@ -1 +0,0 @@
-import{withPathPrefix as r}from"@redocly/theme/core/utils";import{AGENT_SKILLS_BASE as l,USER_SKILL_FILENAME as t}from"../../../../constants/common.js";import{SKILLS_INDEX_SLUG as m}from"./constants.js";import{skillMarkdownHandler as S}from"./skill-markdown.js";import{skillsIndexHandler as L}from"./skills-index.js";function E(i,o){i.get(r(m),L(o)),i.get(r(`${l}/:slug/${t}`),S(o))}export{E as installSkillsRoutes};

package/dist/server/web-server/routes/skills/types.d.ts

@@ -1,12 +0,0 @@
-export type SkillsIndexEntry = {
-    name: string;
-    type: 'skill-md';
-    description: string;
-    url: string;
-    digest: string;
-};
-export type SkillsIndex = {
-    $schema: string;
-    skills: SkillsIndexEntry[];
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/server/web-server/routes/static-content.d.ts

@@ -1,5 +0,0 @@
-import type { Context } from 'hono';
-import type { Store } from '../../store';
-import type { StaticAssetReader } from '../routes/index.js';
-export declare const staticContentHandler: (filePath: string, ctx: Context, store: Store, readStaticAsset: StaticAssetReader) => Promise<Response | null>;
-//# sourceMappingURL=static-content.d.ts.map

package/dist/server/web-server/routes/static-content.js

@@ -1 +0,0 @@
-import o from"path";import{REDOCLY_ROUTE_RBAC as C}from"@redocly/config";import{PUBLIC_STATIC_FOLDER as r}from"../../constants/common.js";import{isPathInFolder as g}from"../../../utils/path/is-path-in-folder.js";import{fileExistsAsync as T}from"../../utils/index.js";import{handleUnauthorizedAsset as h}from"../utils.js";import{MIME_TYPES as w}from"../mime-types.js";import{getContentTypeHeaderValue as y}from"../utils/content-type.js";import{canAccessResource as E}from"../../utils/rbac.js";const U=async(e,n,s,a)=>{const c=n.req,{isAuthenticated:m,teams:l,claims:{email:u}}=n.get("auth"),i=o.join(r,r);e.startsWith(i)&&(e=e.replace(i,r));const t=o.resolve(s.outdir,e);if(!g(t,o.join(s.outdir,r)))return null;if(await T(t)){const p={[C]:{slug:e,fsPath:t},slug:e};if(!E(p,{isAuthenticated:m,email:u,teams:l},s.config.access?.rbac,s.config.access?.requiresLogin))return h(n);const f=c.query("download")!=null,d=w[o.extname(t)]||"text/plain",A=await a(t);return n.newResponse(A,200,{"Content-Type":y(d),"Access-Control-Allow-Origin":"*",...f&&{"Content-Disposition":`attachment; filename="${o.basename(t)}"`}})}else return null};export{U as staticContentHandler};

package/dist/server/web-server/store-ws.d.ts

@@ -1,4 +0,0 @@
-import type { Store } from '../store.js';
-import type { WsServer } from './ws.js';
-export declare function listenStore(store: Store, ws: WsServer): void;
-//# sourceMappingURL=store-ws.d.ts.map

package/dist/server/web-server/store-ws.js

@@ -1 +0,0 @@
-import{logger as r}from"../tools/notifiers/logger.js";import{reporter as o}from"../tools/notifiers/reporter.js";import{getBilledPagesCount as p}from"../utils/index.js";function l(t,d){t.on("routes-updated",()=>{d.broadcast({type:"routes-updated"}),r.verbose('Broadcast "routes-updated" over web-socket')}),t.on("build-updated",()=>{d.unfreeze(),d.broadcast({type:"build-updated"})}),t.on("global-data-updated",e=>{d.broadcast({type:"global-data-updated",data:e})}),t.on("build-started",()=>{d.freeze()}),t.on("shared-data-updated",e=>{d.broadcast({type:"shared-data-updated",id:e})}),d.onConnect(e=>{e.send(JSON.stringify({type:"errors-updated",errors:o.getProblems()}));const a=p(t.getAllRoutes());a&&e.send(JSON.stringify({type:"pages-updated",pages:a}))}),t.on("errors-updated",e=>{d.broadcast({type:"errors-updated",errors:e})}),t.on("pages-updated",e=>{d.broadcast({type:"pages-updated",pages:e})})}export{l as listenStore};

package/dist/server/web-server/utils/content-type.d.ts

@@ -1,2 +0,0 @@
-export declare function getContentTypeHeaderValue(mimeType: string): string;
-//# sourceMappingURL=content-type.d.ts.map

package/dist/server/web-server/utils/content-type.js

@@ -1 +0,0 @@
-function r(t){return t.startsWith("text/")?`${t}; charset=utf-8`:t}export{r as getContentTypeHeaderValue};

package/dist/server/web-server/utils/feedback-ip.d.ts

@@ -1,2 +0,0 @@
-export declare function getFeedbackClientIp(request: Request): string | undefined;
-//# sourceMappingURL=feedback-ip.d.ts.map

package/dist/server/web-server/utils/feedback-ip.js

@@ -1 +0,0 @@
-import{getClientIp as i,isValidIp as t}from"./get-client-ip.js";function d(e){const n=e.headers.get("x-real-ip");return t(n)?n??void 0:i(e)??void 0}export{d as getFeedbackClientIp};

package/dist/server/web-server/utils/format-saml-certificate.d.ts

@@ -1,2 +0,0 @@
-export declare function formatSamlCertificate(cert: string): string;
-//# sourceMappingURL=format-saml-certificate.d.ts.map

package/dist/server/web-server/utils/format-saml-certificate.js

@@ -1,3 +0,0 @@
-import{BEGIN_CERTIFICATE_DELIMITER as t,END_CERTIFICATE_DELIMITER as I}from"../../constants/common.js";function i(E){return E.startsWith(t)?E:`${t}
-${E}
-${I}`}export{i as formatSamlCertificate};

package/dist/server/web-server/utils/get-client-ip.d.ts

@@ -1,4 +0,0 @@
-export declare const POSSIBLE_HEADERS_WITH_IP: string[];
-export declare function getClientIp(req: Request): string | null | undefined;
-export declare function isValidIp(headerValue: string | null | undefined): boolean;
-//# sourceMappingURL=get-client-ip.d.ts.map

package/dist/server/web-server/utils/get-client-ip.js

@@ -1 +0,0 @@
-const d=/^(?:(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])\.){3}(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])$/,s=/^((?=.*::)(?!.*::.+::)(::)?([\dA-F]{1,4}:(:|\b)|){5}|([\dA-F]{1,4}:){6})((([\dA-F]{1,4}((?!\3)::|:\b|$))|(?!\2\3)){2}|(((2[0-4]|1\d|[1-9])?\d|25[0-5])\.?\b){4})$/i,c=["x-client-ip","cf-connecting-ip","do-connecting-ip","true-client-ip","x-real-ip","x-cluster-client-ip","x-appengine-user-ip"];function f(t){if(t.headers){const n=p(t.headers.get("x-forwarded-for"));if(i(n))return n;for(const e of c)if(i(t.headers.get(e)))return t.headers.get(e)}}function p(t){if(!t)return;const n=t.split(",").map(e=>{const r=e.trim();if(r.includes(":")){const o=r.split(":");if(o.length===2)return o[0]}return r});for(let e=0;e<n.length;e++)if(i(n[e]))return n[e]}function i(t){return t?d.test(t)||s.test(t):!1}export{c as POSSIBLE_HEADERS_WITH_IP,f as getClientIp,i as isValidIp};

package/dist/server/web-server/utils/get-redirect-login-url.d.ts

@@ -1,3 +0,0 @@
-import type { Store } from '../../store';
-export declare function getRedirectLoginUrl(store: Store, slug: string): string | undefined;
-//# sourceMappingURL=get-redirect-login-url.d.ts.map

package/dist/server/web-server/utils/get-redirect-login-url.js

@@ -1 +0,0 @@
-import{getLocaleFromPathname as l}from"@redocly/theme/core/utils";import{buildLoginUrl as a}from"../../../utils/auth/build-login-url.js";import{getLoginUrlWithRedirect as c}from"../utils.js";function m(o,t){const i=o.globalData.auth?.devLogin,r=o.getConfig().ssoDirect||{},e=Object.keys(r);if(i||e.length>1)return c(t);if(e.length===1){const n=o.globalData.l10n;return a(e[0],l(t,n?.defaultLocale,n?.locales),t)}}export{m as getRedirectLoginUrl};

package/dist/server/web-server/utils/get-request-origin.d.ts

@@ -1,6 +0,0 @@
-import type { Context } from 'hono';
-export declare function getRequestOrigin(ctx: Context): string;
-/** Request-based counterpart of `getRequestOrigin`; the same trust caveat applies. */
-export declare function getForwardedOrigin(request: Request): string;
-export declare function getInternalOrigin(request: Request): string | undefined;
-//# sourceMappingURL=get-request-origin.d.ts.map

package/dist/server/web-server/utils/get-request-origin.js

@@ -1 +0,0 @@
-import{envConfig as i}from"../../config/env-config.js";const c=["localhost","127.0.0.1","::1","[::1]"];function n(o){return o?.split(",")[0].trim()||void 0}const a=/^(?:[A-Za-z0-9._-]+|\[[0-9A-Fa-f:.]+\])(?::\d{1,5})?$/;function s(o){const t=n(o);return t&&a.test(t)?t:void 0}function d(o){const t=n(o)?.toLowerCase();return t==="http"||t==="https"?t:void 0}function p(o){const t=o.replace(/:\d+$/,"");return c.includes(t)||t.endsWith(".localhost")}function h(o){const t=new URL(o.req.url),r=d(o.req.header("x-forwarded-proto"))||t.protocol.slice(0,-1)||"https",e=s(o.req.header("x-forwarded-host"))||t.host;return`${r}://${e}`}function u(o){const t=new URL(o.url),r=s(o.headers.get("x-forwarded-host"))||t.host;return`${d(o.headers.get("x-forwarded-proto"))||(p(r)?"http":"https")}://${r}`}function l(o){const t=o.context?.remoteAddr?.port??i.PORT;return t?`http://127.0.0.1:${t}`:void 0}export{u as getForwardedOrigin,l as getInternalOrigin,h as getRequestOrigin};

package/dist/server/web-server/utils/legacy-openapi-redirects.d.ts

@@ -1,2 +0,0 @@
-export declare function getRedirectRoute(oldPath: string): string | null;
-//# sourceMappingURL=legacy-openapi-redirects.d.ts.map

package/dist/server/web-server/utils/legacy-openapi-redirects.js

@@ -1 +0,0 @@
-const a=[{oldPattern:/\/tag\/([^/]+)(?:\/operation\/([^/]+))?/,newPath(t){return t.replace(this.oldPattern,(e,r,n)=>{const o=n?`/${n}`:"";return`/${r}${o}`}).replace(/\/{2,}/g,"/")}}];function c(t){for(const e of a)if(t.match(e.oldPattern))return e.newPath(t).toLowerCase();return null}export{c as getRedirectRoute};