@redocly/redoc-reef 0.138.0-next.13 → 0.138.0-next.15

package/dist/server/plugins/mcp/codemode/sandbox/polyfills/url.js

@@ -1,239 +0,0 @@
-const t=`
-  // Collapses '.' and '..'. A backslash separates path segments, the way the host parser reads
-  // one, so it is folded into '/' first \u2014 otherwise the two disagree about where the host name
-  // ends in 'https://a.example\\@b.example/', and guest code reads a host the gateway never calls.
-  const normalizePath = (rawPath) => {
-    const path = rawPath.replace(/\\\\/g, '/');
-    const out = [];
-    for (const segment of path.split('/')) {
-      if (segment === '.') continue;
-      if (segment === '..') { if (out.length > 1) out.pop(); continue; }
-      out.push(segment);
-    }
-    let joined = out.join('/');
-    if ((path.endsWith('/.') || path.endsWith('/..')) && !joined.endsWith('/')) joined += '/';
-    return joined;
-  };
-
-  const DEFAULT_PORTS = { 'http:': '80', 'https:': '443', 'ws:': '80', 'wss:': '443', 'ftp:': '21' };
-
-  // Percent-encode what cannot travel literally in a url, so a hand-assembled path or query
-  // reaches the host parser as the caller meant it. Non-ASCII goes out as UTF-8, in runs, so a
-  // surrogate pair is encoded as the one character it stands for.
-  const encodeLiterals = (value) =>
-    value.replace(/[\\s"<>\\\`{}\\\\^]|[^\\x00-\\x7F]+/g, (chunk) => {
-      try { return encodeURIComponent(chunk); } catch (error) { return chunk; }
-    });
-
-  // A non-ASCII host name is lower-cased but not punycoded \u2014 that needs an IDNA table this sandbox
-  // does not carry. The host re-parses the url before it fetches, so the request still goes to the
-  // punycoded name; only what guest code reads back differs.
-  const parseHostPort = (hostport, scheme) => {
-    let hostname = hostport;
-    let port = '';
-    if (hostport.startsWith('[')) {
-      const close = hostport.indexOf(']');
-      hostname = hostport.slice(0, close + 1);
-      const after = hostport.slice(close + 1);
-      if (after.startsWith(':')) port = after.slice(1);
-    } else {
-      const colon = hostport.lastIndexOf(':');
-      if (colon !== -1) { hostname = hostport.slice(0, colon); port = hostport.slice(colon + 1); }
-    }
-    if (port !== '' && !/^[0-9]+$/.test(port)) return null;
-    if (hostname === '') return null;
-    return {
-      hostname: hostname.toLowerCase(),
-      port: DEFAULT_PORTS[scheme] === port ? '' : port,
-      // A host written without a port leaves the port alone, rather than clearing it.
-      hasPort: port !== '',
-    };
-  };
-
-  const ABSOLUTE_RE = /^([A-Za-z][A-Za-z0-9+\\-.]*):(\\/\\/)?([\\s\\S]*)$/;
-
-  const parseAuthorityUrl = (scheme, rest) => {
-    const cut = rest.search(/[/\\\\?#]/);
-    const authority = cut === -1 ? rest : rest.slice(0, cut);
-    let tail = cut === -1 ? '' : rest.slice(cut);
-    let username = '';
-    let password = '';
-    let hostport = authority;
-    const at = authority.lastIndexOf('@');
-    if (at !== -1) {
-      const credentials = authority.slice(0, at);
-      hostport = authority.slice(at + 1);
-      const colon = credentials.indexOf(':');
-      username = colon === -1 ? credentials : credentials.slice(0, colon);
-      password = colon === -1 ? '' : credentials.slice(colon + 1);
-    }
-    const hostPort = parseHostPort(hostport, scheme);
-    if (!hostPort) return null;
-    let hash = '';
-    const hashAt = tail.indexOf('#');
-    if (hashAt !== -1) { hash = tail.slice(hashAt); tail = tail.slice(0, hashAt); }
-    let search = '';
-    const queryAt = tail.indexOf('?');
-    if (queryAt !== -1) { search = tail.slice(queryAt); tail = tail.slice(0, queryAt); }
-    let pathname = tail === '' ? '/' : tail;
-    if (!/^[/\\\\]/.test(pathname)) pathname = '/' + pathname;
-    return {
-      protocol: scheme,
-      username,
-      password,
-      hostname: hostPort.hostname,
-      port: hostPort.port,
-      pathname: encodeLiterals(normalizePath(pathname)),
-      search: encodeLiterals(search === '?' ? '' : search),
-      hash: encodeLiterals(hash === '#' ? '' : hash),
-    };
-  };
-
-  const parseUrl = (input, base) => {
-    // A tab or newline inside a url is dropped, not encoded \u2014 the host parser does the same, and
-    // a url copied out of a wrapped response body is the usual way one gets in here.
-    const str = String(input).trim().replace(/[\\t\\n\\r]/g, '');
-    const matched = ABSOLUTE_RE.exec(str);
-    // A scheme with no \`//\` (mailto:, data:) is not a fetch target, so it is not resolved.
-    if (matched) return matched[2] ? parseAuthorityUrl(matched[1].toLowerCase() + ':', matched[3]) : null;
-    if (base === undefined) return null;
-    const resolved = parseUrl(base, undefined);
-    if (!resolved) return null;
-    if (/^[/\\\\]{2}/.test(str)) return parseAuthorityUrl(resolved.protocol, str.slice(2));
-    const parts = { ...resolved };
-    if (str.startsWith('#')) {
-      parts.hash = encodeLiterals(str === '#' ? '' : str);
-      return parts;
-    }
-    let rest = str;
-    let hash = '';
-    const hashAt = rest.indexOf('#');
-    if (hashAt !== -1) { hash = rest.slice(hashAt); rest = rest.slice(0, hashAt); }
-    let search = '';
-    const queryAt = rest.indexOf('?');
-    if (queryAt !== -1) { search = rest.slice(queryAt); rest = rest.slice(0, queryAt); }
-    if (rest !== '') {
-      const absolute = /^[/\\\\]/.test(rest)
-        ? rest
-        : resolved.pathname.slice(0, resolved.pathname.lastIndexOf('/') + 1) + rest;
-      parts.pathname = encodeLiterals(normalizePath(absolute));
-    }
-    // An empty reference with no query of its own keeps the base query (RFC 3986 section 5.3).
-    parts.search = rest === '' && search === '' ? resolved.search : encodeLiterals(search === '?' ? '' : search);
-    parts.hash = encodeLiterals(hash === '#' ? '' : hash);
-    return parts;
-  };
-
-  const URL = class URL {
-    constructor(input, base) {
-      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
-      if (!parsed) throw new TypeError('Invalid URL: ' + String(input));
-      this._parts = parsed;
-      this._params = undefined;
-      this._edited = false;
-    }
-    // The query stays exactly as it arrived until searchParams edits it, so reading a url apart
-    // and putting it back together does not re-encode what the server sent.
-    _applyParams() {
-      if (this._edited && this._params) {
-        const query = this._params.toString();
-        this._parts.search = query ? '?' + query : '';
-        this._edited = false;
-      }
-    }
-    // Every part a caller can read, it can also write. Guest code runs sloppy, so a missing
-    // setter would swallow \`url.host = \u2026\` and fetch the address the caller meant to replace.
-    get protocol() { return this._parts.protocol; }
-    set protocol(value) {
-      const next = String(value).toLowerCase().replace(/:$/, '') + ':';
-      // Only a scheme that carries an authority can replace one, the way the host parser reads it.
-      if (DEFAULT_PORTS[next] !== undefined) this._parts.protocol = next;
-    }
-    get username() { return this._parts.username; }
-    set username(value) { this._parts.username = String(value); }
-    get password() { return this._parts.password; }
-    set password(value) { this._parts.password = String(value); }
-    get hostname() { return this._parts.hostname; }
-    set hostname(value) { this._parts.hostname = String(value).toLowerCase(); }
-    get port() { return this._parts.port; }
-    set port(value) {
-      const port = String(value);
-      if (port !== '' && !/^[0-9]+$/.test(port)) return;
-      this._parts.port = DEFAULT_PORTS[this._parts.protocol] === port ? '' : port;
-    }
-    get host() {
-      return this._parts.port ? this._parts.hostname + ':' + this._parts.port : this._parts.hostname;
-    }
-    set host(value) {
-      const parsed = parseHostPort(String(value), this._parts.protocol);
-      if (!parsed) return;
-      this._parts.hostname = parsed.hostname;
-      if (parsed.hasPort) this._parts.port = parsed.port;
-    }
-    get origin() { return this._parts.protocol + '//' + this.host; }
-    get pathname() { return this._parts.pathname; }
-    set pathname(value) {
-      const path = String(value);
-      this._parts.pathname = encodeLiterals(path.startsWith('/') ? path : '/' + path);
-    }
-    get search() {
-      this._applyParams();
-      return this._parts.search;
-    }
-    set search(value) {
-      const query = String(value);
-      const body = query.startsWith('?') ? query.slice(1) : query;
-      this._parts.search = body ? encodeLiterals('?' + body) : '';
-      this._params = undefined;
-      this._edited = false;
-    }
-    get searchParams() {
-      if (!this._params) {
-        const params = new URLSearchParams(this._parts.search);
-        const url = this;
-        // Every method that can change the parameters has to mark the query for re-serialization.
-        for (const method of ['append', 'set', 'delete', 'sort']) {
-          const original = params[method];
-          params[method] = function (...args) {
-            url._edited = true;
-            return original.apply(params, args);
-          };
-        }
-        this._params = params;
-      }
-      return this._params;
-    }
-    get hash() { return this._parts.hash; }
-    set hash(value) {
-      const fragment = String(value);
-      this._parts.hash = fragment === ''
-        ? ''
-        : encodeLiterals(fragment.startsWith('#') ? fragment : '#' + fragment);
-    }
-    get href() {
-      this._applyParams();
-      const credentials = this._parts.username
-        ? this._parts.username + (this._parts.password ? ':' + this._parts.password : '') + '@'
-        : '';
-      return this._parts.protocol + '//' + credentials + this.host +
-        this._parts.pathname + this._parts.search + this._parts.hash;
-    }
-    set href(value) {
-      const parsed = parseUrl(value, undefined);
-      if (!parsed) throw new TypeError('Invalid URL: ' + String(value));
-      this._parts = parsed;
-      this._params = undefined;
-      this._edited = false;
-    }
-    toString() { return this.href; }
-    toJSON() { return this.href; }
-    static canParse(input, base) {
-      return parseUrl(input, base === undefined ? undefined : String(base)) !== null;
-    }
-    static parse(input, base) {
-      const parsed = parseUrl(input, base === undefined ? undefined : String(base));
-      return parsed ? new URL(input, base) : null;
-    }
-  };
-  globalThis.URL = URL;
-`;export{t as URL_POLYFILL};

package/dist/server/plugins/mcp/codemode/sandbox/tool-input-validator.d.ts

@@ -1,5 +0,0 @@
-type ToolInputValidator = (input: unknown) => string | undefined;
-/** Validates a sandbox tool call against the tool's MCP input schema before the handler runs. */
-export declare function createToolInputValidator(sandboxName: string, schema: Record<string, unknown>): ToolInputValidator;
-export {};
-//# sourceMappingURL=tool-input-validator.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/tool-input-validator.js

@@ -1 +0,0 @@
-import s from"@redocly/ajv";const c=new s({allErrors:!0}),n=new Map;function f(t,r){const e=d(r);if(!e)return()=>{};const o=Object.keys(r.properties??{});return i=>{if(e(i??{}))return;const a=p(e.errors??[]);return`Invalid input for tools.${t}: ${a.join("; ")}. Accepted properties: ${o.join(", ")}. Call describe-tools for the exact signature.`}}function d(t){const r=JSON.stringify(t);if(n.has(r))return n.get(r);let e;try{e=c.compile(t)}catch{e=void 0}return n.set(r,e),e}function p(t){const r=new Set;for(const e of t)switch(e.keyword){case"additionalProperties":r.add(`unknown property "${e.params.additionalProperty}"`);break;case"required":r.add(`missing required property "${e.params.missingProperty}"`);break;default:r.add(`${u(e.instancePath)} ${e.message}`)}return[...r]}function u(t){return t?`"${t.replace(/^\//,"").replace(/\//g,".")}"`:"input"}export{f as createToolInputValidator};

package/dist/server/plugins/mcp/codemode/sandbox/unknown-tool-hint.d.ts

@@ -1,12 +0,0 @@
-import type { GuestPosition } from '../../../../sandbox/types.js';
-export type GuestErrorDescription = {
-    message: string;
-    unknownTool?: string;
-};
-/**
- * Turns a guest error into the message the model reads. A call on a tool the sandbox does not
- * hold names that tool and lists the available ones; every other error keeps its message and
- * gains the line it was thrown on.
- */
-export declare function describeGuestError(code: string, message: string, position: GuestPosition | undefined, availableTools: string[]): GuestErrorDescription;
-//# sourceMappingURL=unknown-tool-hint.d.ts.map

package/dist/server/plugins/mcp/codemode/sandbox/unknown-tool-hint.js

@@ -1,2 +0,0 @@
-import{TOOLS_BRIDGE_GLOBAL_NAME as c}from"../constants.js";const i="not a function",d=new RegExp(`(?:^|[^\\w$.])${c}\\s*(?:(?:\\?\\.|\\.)\\s*([A-Za-z_$][\\w$]*)|(?:\\?\\.)?\\s*\\[\\s*(['"])([^'"]*)\\2\\s*\\])\\s*(?:\\?\\.)?\\s*$`);function $(o,t,n,e){const f=n&&E(o,n);if(!n||f===void 0)return{message:t};const s=t===i?l(o.slice(0,f),e):void 0;return s===void 0?{message:`${t} (line ${n.line})`}:{message:`Unknown tool "${s}". Available tools: ${e.join(", ")}`,unknownTool:s}}function l(o,t){const n=d.exec(o),e=n?.[1]??n?.[3];return e!==void 0&&!t.includes(e)?e:void 0}function E(o,{line:t,column:n}){const e=o.split(`
-`);if(t>e.length)return;const s=e.slice(0,t-1).reduce((u,r)=>u+r.length+1,0)+n-1;return s<=o.length?s:void 0}export{$ as describeGuestError};

package/dist/server/plugins/mcp/codemode/tools/describe-tools.d.ts

@@ -1,6 +0,0 @@
-import type { McpToolSchema } from '../../../../types';
-import type { McpToolCallback, McpToolContext } from '../../types.js';
-import { type SandboxCapability } from '../capabilities/index.js';
-export declare function describeToolsSchema(tools: McpToolSchema[], capabilities: SandboxCapability[]): McpToolSchema;
-export declare function describeTools(tools: McpToolSchema[], isToolAvailable: (toolName: string) => Promise<boolean>, capabilities: SandboxCapability[], context: McpToolContext): McpToolCallback;
-//# sourceMappingURL=describe-tools.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/describe-tools.js

@@ -1,3 +0,0 @@
-import{renderDescribeToolsOutput as _}from"../capabilities/index.js";import{McpServerType as u}from"../../constants.js";import{logMcpToolCallAudit as E,reportMcpToolCalled as k,reportMcpToolError as C}from"../../workers/mcp-tool-telemetry.js";import{DESCRIBE_TOOLS_TOOL_NAME as l}from"../constants.js";import{DESCRIBE_TOOLS_DESCRIPTION as j}from"../prompts.js";import{sanitizeToolName as s}from"../build-tool-type-declarations.js";import{UnknownToolError as O}from"./tool-errors.js";import{callAttribution as N}from"../../utils/telemetry-attributes.js";function U(c,f){const r=[...new Set([...c.map(n=>s(n.name)),...f.map(n=>s(n.id))])];return{name:l,title:"Describe tools",description:j,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},schema:{type:"object",required:[],additionalProperties:!1,properties:{tools:{type:"array",description:`Tool names to describe: ${r.join(", ")}. Omit to describe everything.`,items:r.length>0?{type:"string",enum:r}:{type:"string"},nullable:!0}}}}}function x(c,f,r,n){const p=new Map(c.map(t=>[s(t.name),t])),w=new Map(r.map(t=>[s(t.id),t]));return async t=>{const b=performance.now(),m=n.mcpMode??"code",d=N(n);try{const o=[...new Set((t.tools??[]).map(s))],i=o.length===0,a=o.filter(e=>!p.has(e)&&!w.has(e));if(a.length>0){const e=[...p.keys(),...w.keys()];throw new O(`Unknown tool(s): ${a.join(", ")}. Valid tools: ${e.join(", ")}.`)}const S=i?r:r.filter(e=>o.includes(s(e.id))),T=i?c:o.filter(e=>p.has(e)).map(e=>p.get(e)),v=await Promise.all(T.map(e=>f(e.name))),D=T.filter((e,y)=>v[y]),M=T.filter((e,y)=>!v[y]),g=[_(D,S,n)];M.length>0&&g.push(`Not available for this request: ${M.map(e=>s(e.name)).join(", ")}`);const h=g.join(`
-
-`);return E({tool:l,mode:m,serverType:u.Docs,args:t,result:h,...d}),k({tool:l,mode:m,serverType:u.Docs,durationMs:Math.round(performance.now()-b),outputLength:h.length,...d}),{content:[{type:"text",text:h}]}}catch(o){const i=o instanceof O,a=i?"tool_error":"server_error";throw E({tool:l,mode:m,serverType:u.Docs,args:t,errorClass:a,...d}),C({tool:l,mode:m,serverType:u.Docs,durationMs:Math.round(performance.now()-b),message:o instanceof Error?o.message:String(o),stack:!i&&o instanceof Error&&o.stack||"",errorClass:a,...d}),o}}}export{x as describeTools,U as describeToolsSchema};

package/dist/server/plugins/mcp/codemode/tools/execute-schema.d.ts

@@ -1,3 +0,0 @@
-import type { McpToolSchema } from '../../../../types';
-export declare const EXECUTE_TOOL_SCHEMA: McpToolSchema;
-//# sourceMappingURL=execute-schema.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/execute-schema.js

@@ -1 +0,0 @@
-import{EXECUTE_TOOL_NAME as e}from"../constants.js";import{buildExecuteDescription as t}from"../prompts.js";const r={name:e,title:"Execute code",description:t(!1),schema:{type:"object",required:["code","description"],additionalProperties:!1,properties:{code:{type:"string",description:"JavaScript to run in the sandbox. Return a value to receive it as the result.",minLength:1},description:{type:"string",description:"A short, human-readable summary of what this code does.",minLength:1},sessionHandle:{type:"string",description:"Handle returned by createAnonymousSession. Required when an API needs credentials. This parameter is only offered when createAnonymousSession is available, so pass it whenever you have called that tool.",minLength:1}}},outputSchema:{type:"object",properties:{result:{description:"The value the code returned, as JSON"},error:{type:"string",description:"Why the code failed. Set only on a failed call"}}}};export{r as EXECUTE_TOOL_SCHEMA};

package/dist/server/plugins/mcp/codemode/tools/execute.d.ts

@@ -1,10 +0,0 @@
-import type { McpToolHandler } from '../../types.js';
-declare const _default: {
-    execute: McpToolHandler<{
-        code: string;
-        description: string;
-        sessionHandle?: string;
-    }>;
-};
-export default _default;
-//# sourceMappingURL=execute.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/execute.js

@@ -1 +0,0 @@
-import{runInSandbox as y}from"../../../../sandbox/sandbox.js";import{SANDBOX_FAILURE as b}from"../../../../sandbox/constants/sandbox.js";import{returnLastExpression as M}from"../../../../sandbox/utils/return-last-expression.js";import{isMcpToolAvailable as v}from"../../workers/execute-mcp-tool.js";import{reportMcpToolError as A}from"../../workers/mcp-tool-telemetry.js";import{McpServerType as S}from"../../constants.js";import{callAttribution as C}from"../../utils/telemetry-attributes.js";import{importMcpToolHandlers as I}from"../../workers/import-mcp-tool-handlers.js";import{isFetchCapable as k}from"../../gateway-mcp/callable-apis.js";import{buildExecuteHostFetch as F}from"../../gateway-mcp/fetch-capability.js";import{withAuthRequiredMeta as D}from"../../gateway-mcp/upstream-auth.js";import{CODE_MODE_TOOL_NAMES as H,EXECUTE_TOOL_NAME as R}from"../constants.js";import{sanitizeToolName as x}from"../build-tool-type-declarations.js";import{invokeTool as j}from"../invoke-tool.js";import{createSandboxSetup as B}from"../sandbox/create-sandbox-setup.js";import{createToolInputValidator as L}from"../sandbox/tool-input-validator.js";import{describeGuestError as P}from"../sandbox/unknown-tool-hint.js";import{auditCode as q}from"../code-audit.js";import{reportCodeExecuted as N}from"../code-execution-telemetry.js";import{logCodeExecutionAudit as U}from"../code-execution-audit.js";import{ToolResultError as X}from"./tool-errors.js";const z=async(o,r,n)=>{const s=new Map,a=await J(r,n,s),d=[],e=k(r)?await F(r,h=>d.push(h)):void 0;let m=0;const f=e?h=>(m+=1,e(h).catch(w=>{throw s.set(O(w),{reason:"runtime_error"}),w})):void 0,u=q(o.code);U({audit:u,code:o.code,description:o.description,sessionHandle:o.sessionHandle,toolNames:Object.keys(a),fetchBudget:r.gatewayFetchBudgetPerExec,fetchCapable:e!==void 0,requestId:r.requestId,messageId:r.messageId});const l=Date.now(),c=M(o.code),{result:i,error:t,failure:T,errorPosition:g}=await y(c,{setupContext:B(a,f),authoredCode:o.code}),p=t===void 0?void 0:P(c,t,g,Object.keys(a)),E=t!==void 0&&T===b.HostError?s.get(t):void 0;N({audit:u,fetchCount:m,outcome:t===void 0?"ok":"error",durationMs:Date.now()-l,failureReason:G(T,E,p?.unknownTool),failedTool:E?.tool,...C(r)});const _=p===void 0?{result:i}:{error:p.message};return D({content:[{type:"text",text:JSON.stringify(_)}],structuredContent:_,isError:t!==void 0,...E?.tool!==void 0?{errorClass:"tool_error"}:{}},d)};function G(o,r,n){return o===b.HostError?r?.reason??"runtime_error":o===b.RuntimeError?n===void 0?o:"unknown_tool":o}async function J(o,r,n){const s=Object.keys(await I()).filter(e=>!H.has(e)),a=await Promise.all(s.map(e=>v({toolName:e,context:o}).catch(()=>!1))),d={};return s.forEach((e,m)=>{if(!a[m])return;const f=x(e),u=o.sandboxToolSchemas?.[e],l=u?L(f,u):void 0;d[f]=c=>{const i=l?.(c);return i?(A({tool:e,message:i,mode:"code",serverType:S.Docs,durationMs:0,errorClass:"tool_error",...C(o)}),n.set(i,{tool:e,reason:"inner_tool_error"}),Promise.reject(new Error(i))):j(e,c,o,r).catch(t=>{throw n.set(O(t),{tool:e,reason:t instanceof X?"inner_tool_error":"server_error"}),t})}}),d}function O(o){return o instanceof Error?o.message:String(o)}var Eo={[R]:z};export{Eo as default};

package/dist/server/plugins/mcp/codemode/tools/manage-credentials.d.ts

@@ -1,20 +0,0 @@
-import type { CallToolResult, InputRequiredResult, ServerContext } from '@modelcontextprotocol/server';
-import type { McpToolSchema } from '../../../../types';
-import type { McpToolContext } from '../../types.js';
-import type { KvService } from '@redocly/config';
-export type ManageApiCredentialsDeps = {
-    getClientCapabilities: () => {
-        elicitation?: {
-            url?: unknown;
-        };
-    } | undefined;
-    getKv: () => Promise<KvService>;
-};
-export declare function isManageApiCredentialsToolAvailable(context: McpToolContext): boolean;
-export declare function manageApiCredentialsSchema(context: McpToolContext): McpToolSchema;
-export declare function manageApiCredentials(context: McpToolContext, deps: ManageApiCredentialsDeps): (args: {
-    api?: unknown;
-    scheme?: unknown;
-    sessionHandle?: unknown;
-}, ctx: ServerContext) => Promise<CallToolResult | InputRequiredResult>;
-//# sourceMappingURL=manage-credentials.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/manage-credentials.js

@@ -1,2 +0,0 @@
-import{MANAGE_API_CREDENTIALS_TOOL_NAME as P}from"../../constants.js";import{acceptedCredentialsLink as k,buildCredentialsAcceptedHint as w,buildUpstreamCredentialFallback as S,buildUpstreamCredentialInputRequired as I,credentialElicitationAnswer as E,dedupeElicitation as C,isStatelessRequest as j,schemeLabelOf as q,supportsUrlElicitation as T}from"../../gateway-mcp/elicitation.js";import{getCallableApis as u,isFetchCapable as H}from"../../gateway-mcp/callable-apis.js";import{secretStore as R}from"../../gateway-mcp/secret-store.js";import{MISSING_SESSION_HANDLE_MESSAGE as U,resolveSecretSubject as $}from"../../gateway-mcp/subject.js";import{upstreamAuthKey as L}from"../../gateway-mcp/upstream-auth.js";import{resolveUpstreamApiAuth as N}from"../../gateway-mcp/upstream-auth-scheme.js";import{apiTitleKey as O,countApiTitles as _}from"../../docs-mcp/utils/api-titles.js";function Q(e){return!!e.elicitationEnabled&&H(e)}function V(e){const s=u(e),t=s.map(r=>r.relativePath),i=[...t,...M(s)];return{name:P,title:"Manage API credentials",description:["Get a secure link where the user sets, replaces, or removes the credentials this server sends to a documented API.","Call it when the user wants to change or clear an API key, or when a tool result tells you the stored credentials were rejected.","The link covers every credential the API accepts, so scheme is optional - pass it only when a tool result names the scheme that was rejected.","It returns a link for the user to open - never ask for the secret in the conversation and never pass it as an argument."].join(`
-`),annotations:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},schema:{type:"object",required:["api"],additionalProperties:!1,properties:{api:{type:"string",description:`The API to manage credentials for: its \`filePath\` or the \`name\` from \`listApis\`.${t.length>0?` The file paths are: ${t.join(", ")}.`:""}`,minLength:1,...i.length>0?{enum:i}:{}},scheme:{type:"string",description:"Name of the security scheme to manage the credential for, as named in the API description (a tool result that reports a rejected credential names it). Omit it to let the link cover every scheme the API accepts.",minLength:1},sessionHandle:{type:"string",description:"Handle returned by createAnonymousSession. Required while the caller is anonymous, so the credentials are stored against the same subject the API calls use.",minLength:1}}}}}function M(e){const s=_(e);return e.map(t=>t.name).filter(t=>s.get(O(t))===1)}function X(e,s){return async(t,i)=>{const r=$(e.user,typeof t.sessionHandle=="string"?t.sessionHandle:void 0);if(r.kind==="invalid")return m(r.message);if(r.kind==="anonymous")return m(U);const{subject:c}=r,p=typeof t.api=="string"?t.api:"",n=u(e).find(l=>l.relativePath===p||l.name===p);if(!n){const l=u(e).map(b=>b.relativePath).join(", ");return m(`Unknown api "${p}". Credentials can only be managed for the APIs this server can call: ${l||"none"}.`)}const d=E(i.mcpReq.inputResponses);if(d==="accepted"){const l=await k(i.mcpReq.requestState(),{kv:await s.getKv(),subject:c,baseUrl:e.baseUrl??"",apis:[n.relativePath]});return{content:[{type:"text",text:w(n.name,l?.url)}],isError:!1}}if(d==="declined")return{content:[{type:"text",text:`The user declined the credentials prompt for the "${n.name}" API, so this call minted no link.`}],isError:!1};const a=await N(e,n.relativePath),o=typeof t.scheme=="string"?t.scheme:void 0,y=Object.keys(a.schemes);if(o&&!a.schemes[o])return m(`Unknown scheme "${o}" for api "${n.relativePath}". The security schemes this server can store credentials for are: ${y.join(", ")}.`);const h=o??a.defaultScheme,f=o?q(a.schemes,o):void 0,A=await s.getKv(),v={subject:c,baseUrl:e.baseUrl??"",target:{api:n.relativePath,name:n.name,scheme:h,...f?{schemeLabel:f}:{}},auth:a.schemes[h],apiAuth:a,kv:A,hasExistingSecret:await R.hasSecret(A,c,n.relativePath,h),reason:{kind:"requested"}};if(j(i.mcpReq)&&T(s.getClientCapabilities()))return await I(v);const g=L({api:n.relativePath,scheme:h});return{content:[{type:"text",text:await C(`${c}:${g}`,()=>S(v))}],isError:!1}}}function m(e){return{content:[{type:"text",text:e}],isError:!0}}export{Q as isManageApiCredentialsToolAvailable,X as manageApiCredentials,V as manageApiCredentialsSchema};

package/dist/server/plugins/mcp/codemode/tools/tool-errors.d.ts

@@ -1,8 +0,0 @@
-/** The tool answered with `isError`, as opposed to failing before it could answer. */
-export declare class ToolResultError extends Error {
-    constructor(message: string);
-}
-export declare class UnknownToolError extends Error {
-    constructor(message: string);
-}
-//# sourceMappingURL=tool-errors.d.ts.map

package/dist/server/plugins/mcp/codemode/tools/tool-errors.js

@@ -1 +0,0 @@
-class s extends Error{constructor(r){super(r),this.name="ToolResultError"}}class e extends Error{constructor(r){super(r),this.name="UnknownToolError"}}export{s as ToolResultError,e as UnknownToolError};

package/dist/server/plugins/mcp/codemode/types.d.ts

@@ -1,17 +0,0 @@
-export type SandboxTool = (input: unknown) => Promise<unknown> | unknown;
-export type SandboxFetchRequest = {
-    url: string;
-    method?: string;
-    headers?: Record<string, string>;
-    body?: string;
-    securityScheme?: string;
-};
-export type SandboxFetchResponse = {
-    status: number;
-    statusText: string;
-    ok: boolean;
-    headers: Record<string, string>;
-    bodyText: string;
-};
-export type SandboxFetch = (request: SandboxFetchRequest) => Promise<SandboxFetchResponse>;
-//# sourceMappingURL=types.d.ts.map

package/dist/server/plugins/mcp/constants.d.ts

@@ -1,21 +0,0 @@
-export declare const McpServerType: {
-    readonly Docs: 'docs';
-};
-export declare const McpErrorCodes: {
-    readonly InternalError: -32603;
-    readonly ServerError: -32000;
-    readonly InvalidRequest: -32600;
-    readonly MethodNotFound: -32601;
-    readonly InvalidParams: -32602;
-};
-export declare const MCP_PROTOCOL_VERSION = "2025-11-25";
-export declare const DEFAULT_CONNECTION_TIMEOUT_MS = 30000;
-export declare const SSE_KEEPALIVE_INTERVAL_MS = 15000;
-export declare const MAX_DOCUMENTS_PER_CATEGORY = 3;
-export declare const DEFAULT_DOCS_MCP_SERVER_NAME = "Docs MCP server";
-export declare const SUPPORTED_MCP_SCOPES: readonly ['openid', 'profile', 'email', 'offline_access'];
-export declare const CREATE_ANONYMOUS_SESSION_TOOL_NAME = "createAnonymousSession";
-export declare const SUBMIT_FEEDBACK_TOOL_NAME = "submit-feedback";
-export declare const MANAGE_API_CREDENTIALS_TOOL_NAME = "manageApiCredentials";
-export declare const CUSTOM_MCP_TOOLS_META_DIR = "custom-mcp-tools-meta";
-//# sourceMappingURL=constants.d.ts.map

package/dist/server/plugins/mcp/constants.js

@@ -1 +0,0 @@
-import{LATEST_PROTOCOL_VERSION as o}from"@modelcontextprotocol/server";const t={Docs:"docs"},E={InternalError:-32603,ServerError:-32e3,InvalidRequest:-32600,MethodNotFound:-32601,InvalidParams:-32602},_=o,r=3e4,s=15e3,O=3,n="Docs MCP server",S=["openid","profile","email","offline_access"],c="createAnonymousSession",T="submit-feedback",M="manageApiCredentials",A="custom-mcp-tools-meta";export{c as CREATE_ANONYMOUS_SESSION_TOOL_NAME,A as CUSTOM_MCP_TOOLS_META_DIR,r as DEFAULT_CONNECTION_TIMEOUT_MS,n as DEFAULT_DOCS_MCP_SERVER_NAME,M as MANAGE_API_CREDENTIALS_TOOL_NAME,O as MAX_DOCUMENTS_PER_CATEGORY,_ as MCP_PROTOCOL_VERSION,E as McpErrorCodes,t as McpServerType,s as SSE_KEEPALIVE_INTERVAL_MS,T as SUBMIT_FEEDBACK_TOOL_NAME,S as SUPPORTED_MCP_SCOPES};

package/dist/server/plugins/mcp/custom-tools/extract-tool-definition.d.ts

@@ -1,13 +0,0 @@
-import type { ToolDefinitionValidationResult } from '../types.js';
-export type ExtractToolDefinitionParams = {
-    toolName: string;
-    absoluteSourcePath: string;
-    contentDir: string;
-    serverOutDir: string;
-};
-/**
- * Reads a tool's schema by bundling the file with esbuild and importing the bundle
- * once at build time; the source file itself only runs in the worker pool.
- */
-export declare function extractToolDefinition(params: ExtractToolDefinitionParams): Promise<ToolDefinitionValidationResult>;
-//# sourceMappingURL=extract-tool-definition.d.ts.map

package/dist/server/plugins/mcp/custom-tools/extract-tool-definition.js

@@ -1 +0,0 @@
-import{existsSync as p}from"node:fs";import{mkdir as b,rm as g,writeFile as w}from"node:fs/promises";import{dirname as y,join as f}from"node:path";import{pathToFileURL as T}from"node:url";import{build as v}from"esbuild";import{shaHex as x}from"../../../utils/crypto/sha-hex.js";import{CUSTOM_MCP_TOOLS_META_DIR as $}from"../constants.js";import{validateToolDefinition as D}from"./validate-tool-definition.js";const m=new Map;async function C(t){const{toolName:n,absoluteSourcePath:a,contentDir:d,serverOutDir:h}=t;let i;try{const e=f(d,"tsconfig.json");i=(await v({entryPoints:[a],write:!1,bundle:!0,format:"esm",platform:"node",mainFields:["module","main"],logLevel:"silent",...p(e)?{tsconfig:e}:{}})).outputFiles[0].text}catch(e){return{ok:!1,errors:[`the file cannot be bundled: ${u(e)}`]}}const s=x(i),l=`${n}:${a}:${s}`,c=m.get(l);if(c)return c;const o=f(h,$,`${s.slice(0,16)}.mjs`);let r;try{await b(y(o),{recursive:!0}),await w(o,i);const e=await import(T(o).href);r=D(n,e.default)}catch(e){r={ok:!1,errors:[`the file failed to load: ${u(e)}. Tool files must not have module-level side effects.`]}}finally{await g(o,{force:!0}).catch(()=>{})}return m.set(l,r),r}function u(t){return t instanceof Error?t.message:String(t)}export{C as extractToolDefinition};

package/dist/server/plugins/mcp/custom-tools/scan-custom-tools.d.ts

@@ -1,6 +0,0 @@
-import type { LifecycleContext, ProcessContentActions } from '../../../types';
-import type { CustomMcpToolsState } from '../types.js';
-/** Registers every file in an `@mcp` folder as one MCP tool, named after the file. */
-export declare function scanCustomMcpTools(actions: ProcessContentActions, context: LifecycleContext, state: CustomMcpToolsState): Promise<number>;
-export declare function resetCustomMcpTools(actions: Pick<ProcessContentActions, 'removeMcpTools'>, state: CustomMcpToolsState): void;
-//# sourceMappingURL=scan-custom-tools.d.ts.map

package/dist/server/plugins/mcp/custom-tools/scan-custom-tools.js

@@ -1 +0,0 @@
-import{basename as d,join as p}from"node:path";import{logger as f}from"../../../tools/notifiers/logger.js";import{reporter as s}from"../../../tools/notifiers/reporter.js";import{CODE_MODE_TOOL_NAMES as h}from"../codemode/constants.js";import{ALL_DEFAULT_TOOL_NAMES as O}from"../docs-mcp/tool-schemas.js";import{extractToolDefinition as T}from"./extract-tool-definition.js";const E=/(^|\/)@mcp\/.*\.(ts|js)$/,M=/^[a-zA-Z0-9_-]{1,64}$/,C=new Set([...h,...O]);async function g(o,a,n){_(o,n);const u=new Set(o.getMcpTools().map(r=>r.name)),l=new Map;for(const r of a.fs.scan(E)){if(r.isVirtual||r.relativePath.endsWith(".d.ts"))continue;const{relativePath:t}=r,e=d(t).replace(/\.(ts|js)$/,"");if(!M.test(e)){await s.panicOnBuildContentError(`Invalid MCP tool file "${t}": the tool name "${e}" is derived from the file name and may only contain letters, numbers, hyphens, and underscores (max 64 characters). Rename the file.`);continue}const c=l.get(e);if(c){await s.panicOnBuildContentError(`Duplicate MCP tool name "${e}": defined by both "${c}" and "${t}". Tool names are file names, so each file name must be unique across @mcp folders.`);continue}if(C.has(e)||u.has(e)){await s.panicOnBuildContentError(`Invalid MCP tool file "${t}": the tool name "${e}" is already used by a built-in MCP tool. Rename the file.`);continue}l.set(e,t);const m=p(o.contentDir,t),i=await T({toolName:e,absoluteSourcePath:m,contentDir:o.contentDir,serverOutDir:o.serverOutDir});if(!i.ok){await s.panicOnBuildContentError(`Invalid MCP tool file "${t}": ${i.errors.join(" ")}`);continue}!i.schema.outputSchema&&!n.warnedNoOutputSchemaTools.has(e)&&(n.warnedNoOutputSchemaTools.add(e),f.warn(`MCP tool "${e}" in %rp declares no \`outputSchema\`. Add one that describes the returned value.`,t)),o.addMcpTools(m,[i.schema]),n.registeredToolNames.push(e)}return n.registeredToolNames.length}function _(o,a){o.removeMcpTools(a.registeredToolNames),a.registeredToolNames=[]}export{_ as resetCustomMcpTools,g as scanCustomMcpTools};

package/dist/server/plugins/mcp/custom-tools/validate-tool-definition.d.ts

@@ -1,3 +0,0 @@
-import type { ToolDefinitionValidationResult, ToolFileDefaultExport } from '../types.js';
-export declare function validateToolDefinition(toolName: string, moduleDefault: ToolFileDefaultExport): ToolDefinitionValidationResult;
-//# sourceMappingURL=validate-tool-definition.d.ts.map

package/dist/server/plugins/mcp/custom-tools/validate-tool-definition.js

@@ -1 +0,0 @@
-import{isPlainObject as s}from"../../../../utils/guards/is-plain-object.js";function f(c,a){if(!s(a))return{ok:!1,errors:["the default export must be an object with `description` and `execute` properties. Move shared helper code outside the `@mcp` folder."]};const{description:i,inputSchema:t,outputSchema:n,annotations:o,isAvailable:u,execute:p}=a,e=[];return(typeof i!="string"||i.trim()==="")&&e.push("`description` must be a non-empty string."),typeof p!="function"&&e.push("`execute` must be a function."),t!==void 0&&(s(t)?t.type!==void 0&&t.type!=="object"&&e.push('`inputSchema.type` must be "object" because MCP tool arguments are named.'):e.push("`inputSchema` must be a JSON Schema object.")),n!==void 0&&!s(n)&&e.push("`outputSchema` must be a JSON Schema object."),o!==void 0&&!s(o)&&e.push("`annotations` must be an object."),u!==void 0&&typeof u!="function"&&e.push("`isAvailable` must be a function."),e.length>0||typeof i!="string"?{ok:!1,errors:e}:{ok:!0,schema:{name:c,description:i,schema:{type:"object",...t??{properties:{}}},...n?{outputSchema:n}:{},...o?{annotations:o}:{},hasAvailabilityGate:typeof u=="function"}}}export{f as validateToolDefinition};

package/dist/server/plugins/mcp/docs-mcp/tool-schemas.d.ts

@@ -1,13 +0,0 @@
-import type { McpToolSchema } from '../../../types';
-export declare function getDefaultToolSchemas(config: {
-    products?: string[];
-    locales?: string[];
-    requiresLogin: boolean;
-    rbac?: Record<string, unknown>;
-    hasGraphqlApis?: boolean;
-    elicitationEnabled?: boolean;
-    hasCallableApis?: boolean;
-    feedbackHidden?: boolean;
-}): McpToolSchema[];
-export declare const ALL_DEFAULT_TOOL_NAMES: ReadonlySet<string>;
-//# sourceMappingURL=tool-schemas.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tool-schemas.js

@@ -1 +0,0 @@
-import{SEMANTIC_SEARCH_API_URL as y}from"../../../constants/common.js";import{shouldHandleMcpAuth as f}from"../../../utils/rbac/should-handle-mcp-auth.js";import{CREATE_ANONYMOUS_SESSION_TOOL_NAME as g,SUBMIT_FEEDBACK_TOOL_NAME as b}from"../constants.js";import{GRAPHQL_TYPE_KINDS as l,GRAPHQL_LIST_SCOPES as v}from"./tools/graphql/constants.js";import{OPERATION_METHODS as c}from"./tools/openapi/constants.js";const i={type:"string",nullable:!0},s={limit:{type:"number"},total:{type:"number"},page:{type:"number"},totalPages:{type:"number"}},a={codemodeType:"OpenApiServer[]"},o={codemodeType:"OpenApiSecurityRequirement[]"},u={codemodeType:"Record<string, OpenApiSecurityScheme>"},P={codemodeType:"OpenApiDocument"},A={codemodeType:"OpenApiOperation & { path: string; method: string }"},S={codemodeType:"OpenApiComponents",description:"Components the endpoint references. A `$ref` in `endpoint` resolves against the root of the result."},n={filePath:{type:"string",description:"API definition file path"},otherMatches:{type:"array",description:"Other API definitions the lookup also matched. Present only when several matched; pass `filePath` to pick another one",items:{type:"object",required:["filePath"],properties:{version:{type:"string"},filePath:{type:"string"}}}}},r="When several definitions match the name, the highest version or the shortest file path is used and the rest are listed in `otherMatches`; tell the user which version or file the answer is based on.",H="A `$ref` in `endpoint` points into the `components` key at the root of the result: read `#/components/<section>/<name>` there.",L={type:"object",additionalProperties:!1,required:[],properties:{filter:{type:"string",description:"Matches part of an API name, or of a description when no name matches",minLength:1,nullable:!0},page:{type:"number",description:"Page number",minimum:1,default:1,nullable:!0},limit:{type:"number",description:"Number of APIs per page. Default is 300",minimum:1,default:300,nullable:!0}}},p={type:"object",required:[],additionalProperties:!1,properties:{name:{type:"string",description:"API name, or a unique part of it. Omit when `filePath` is given.",minLength:1,nullable:!0},apiName:{type:"string",description:"Alias of `name`",nullable:!0},api:{type:"string",description:"Alias of `name`",nullable:!0},version:{type:"string",description:"API version. When omitted and several versions exist, the highest one is used",nullable:!0},filePath:{type:"string",description:"API definition file path, as returned by `listApis`",nullable:!0}}},q={type:"object",required:["path","method"],additionalProperties:!1,properties:{name:{type:"string",description:"API name, or a unique part of it. Omit when `filePath` is given.",minLength:1,nullable:!0},apiName:{type:"string",description:"Alias of `name`",nullable:!0},api:{type:"string",description:"Alias of `name`",nullable:!0},path:{type:"string",description:"Endpoint path (e.g. /api/v1/users)",minLength:1},method:{type:"string",description:"HTTP method (GET, POST, PUT, DELETE, etc.)",enum:[...c.map(e=>e.toUpperCase()),...c],minLength:1},version:{type:"string",description:"API version. When omitted and several versions exist, the highest one is used",nullable:!0},filePath:{type:"string",description:"API definition file path, as returned by `listApis`",nullable:!0}}},O={type:"object",required:[],additionalProperties:!1,properties:{}},T={type:"object",required:[],additionalProperties:!1,properties:{}},G={type:"object",required:["path","summary"],additionalProperties:!1,properties:{path:{type:"string",description:"Path or URL of the documentation page the feedback is about (e.g. /guides/auth)",minLength:1,maxLength:1e3},summary:{type:"string",description:"One sentence that names what is wrong with the page",minLength:1,maxLength:500},details:{type:"string",description:"Expected versus actual behavior, missing steps, or the snippet that failed",maxLength:4e3,nullable:!0},targetFeature:{type:"string",description:"The API or feature the page documents",maxLength:500,nullable:!0}}};function I(e){const t=[{name:"list-apis",title:"List APIs",description:"Lists the APIs documented in this project",schema:L,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["items","limit","total","page","totalPages"],properties:{items:{type:"array",items:{type:"object",required:["name","description","version","servers","filePath"],properties:{name:{type:"string"},description:{type:"string"},version:{type:"string"},servers:a,filePath:{type:"string",description:"API definition file path"},ambiguousTitle:{type:"boolean",description:"true = another API shares this title; a lookup picks the highest version, or the shortest file path at the same version, and lists the rest in `otherMatches`. Pass `filePath` to pick another one"},...e.hasCallableApis?{callable:{type:"boolean",description:"true = the documented hosts of this API are reachable via `fetch`; false = documentation only"}}:{}}}},...s}}},{name:"get-endpoints",title:"Get endpoints",description:`Get all endpoints for a specific API. ${r}`,schema:p,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["api","version","filePath","servers","endpoints"],properties:{api:{type:"string"},version:{type:"string"},...n,servers:a,endpoints:{type:"array",items:{type:"object",required:["path","method"],properties:{path:{type:"string"},method:{type:"string"},summary:i,description:i,security:o}}}}}},{name:"get-endpoint-info",title:"Get endpoint info",description:`Get comprehensive information about specific endpoint including parameters, security, and examples. ${H} ${r}`,schema:q,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["api","version","filePath","servers","endpoint","globalSecurity","securitySchemes"],properties:{api:{type:"string"},version:{type:"string"},...n,servers:a,endpoint:A,globalSecurity:o,securitySchemes:u,components:S}}},{name:"get-security-schemes",title:"Get security schemes",description:`Get the security schemes for a specific API. ${r}`,schema:p,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["api","version","filePath","securitySchemes","security"],properties:{api:{type:"string"},version:{type:"string"},...n,securitySchemes:u,security:o}}},{name:"get-full-api-description",title:"Get full API description",description:`Get the complete OpenAPI description. ${r}`,schema:p,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["api","version","filePath","definition"],properties:{api:{type:"string"},version:{type:"string"},...n,definition:P}}},...y?[d(e.products,e.locales)]:[]];return f(e.requiresLogin,e.rbac)&&t.push({name:"whoami",title:"Who am I",description:"Get information about the currently authenticated user",schema:O,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["authenticated"],properties:{authenticated:{type:"boolean"},email:{type:"string"},name:{type:"string"},subject:{type:"string"},clientId:{type:"string"},scope:{type:"string"},issuedAt:{type:"string"},expiresAt:{type:"string"}}}}),e.feedbackHidden||t.push({name:b,title:"Submit feedback",description:"Report a documentation page that is wrong or incomplete",schema:G,annotations:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},outputSchema:{type:"object",required:["status","page","message"],properties:{status:{type:"string"},page:{type:"string"},message:{type:"string"}}}}),e.hasGraphqlApis&&t.push(...k()),e.elicitationEnabled&&e.hasCallableApis&&t.push({name:g,title:"Create anonymous session",description:"Create an anonymous session handle for storing upstream API credentials. Pass the returned sessionHandle to execute when an API needs credentials and the caller is not signed in. Treat it as a secret and reuse it across calls.",schema:T,annotations:{readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},outputSchema:{type:"object",required:["sessionHandle"],properties:{sessionHandle:{type:"string"}}}}),t}const w={type:"object",required:[],additionalProperties:!1,properties:{filter:{type:"string",description:"GraphQL schema name (or part of it)",minLength:1,nullable:!0},page:{type:"number",description:"Page number",minimum:1,default:1,nullable:!0},limit:{type:"number",description:"Number of results per page. Default is 300",minimum:1,default:300,nullable:!0}}},j={type:"object",required:["name"],additionalProperties:!1,properties:{name:{type:"string",description:"GraphQL schema name",minLength:1},kind:{type:"string",description:'Optional: return only a single category of schema members. With scope "fields", restricts to the fields of that parent category ("objects", "interfaces", or "inputs" only).',enum:[...l,null],nullable:!0},scope:{type:"string",description:'Optional: what each list item is. "members" (default) lists top-level types and operations. "fields" flattens every field of every object/interface/input type into "ParentType.fieldName" entries with their descriptions \u2014 combine with `filter` to search nested fields anywhere in the schema.',enum:[...v,null],nullable:!0},filter:{type:"string",description:'Optional: only members whose name or description contains this substring, case-insensitive (e.g. "custom tags")',minLength:1,nullable:!0},referencesType:{type:"string",description:'Optional: only members that reference this type directly or transitively (via return, field, argument, union-member or input-field types). Finds cross-cutting members that never name it \u2014 e.g. referencesType "Book" surfaces a search query returning a union that includes Book.',minLength:1,nullable:!0},page:{type:"number",description:"Page number",minimum:1,default:1,nullable:!0},limit:{type:"number",description:"Number of results per page. Default is 300",minimum:1,default:300,nullable:!0}}},E={type:"object",required:["name"],additionalProperties:!1,properties:{name:{type:"string",description:"GraphQL schema name",minLength:1},type:{type:"string",description:"Name of the type, operation, or directive",minLength:1,nullable:!0},typeName:{type:"string",description:"Alias of `type`",nullable:!0},includeReferencedTypes:{type:"boolean",description:"Also include the SDL of every type referenced transitively. Gives the whole subgraph at once, but can be large for highly-connected types.",default:!1,nullable:!0}}},N={type:"object",required:["name"],additionalProperties:!1,properties:{name:{type:"string",description:"GraphQL schema name",minLength:1}}};function k(){return[{name:"list-graphql-apis",title:"List GraphQL APIs",description:"Lists available GraphQL schemas with their context and purpose",schema:w,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["items","limit","total","page","totalPages"],properties:{items:{type:"array",items:{type:"object",required:["name"],properties:{name:{type:"string"},description:i}}},...s}}},{name:"get-graphql-type-list",title:"Get GraphQL type list",description:'List all operations and types in a GraphQL schema as a flat, paginated list. Each item is tagged with its kind (query, object, enum, \u2026) and carries a one-line description; operations also include their return type and argument signature \u2014 use it to decide which members to fetch in detail. Narrow the result with `kind` (one category), `filter` (case-insensitive substring of the member name or description, e.g. "book"), or `referencesType` (only members that use a given type, directly or transitively) to explore a domain cheaply instead of pulling the full schema. To search nested fields \u2014 not just type names \u2014 set scope "fields": it flattens every field of every object/interface/input type into "ParentType.fieldName" entries with their descriptions, so `filter` finds things like an input field whose docstring mentions your keyword.',schema:j,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"object",required:["name","items","limit","total","page","totalPages"],properties:{name:{type:"string"},items:{type:"array",items:{type:"object",required:["kind","name"],properties:{kind:{type:"string",enum:l},name:{type:"string"},description:i,type:{type:"string"},args:{type:"string"},directives:{type:"string"}}}},...s}}},{name:"get-graphql-type",title:"Get GraphQL type",description:'Get the SDL for a single GraphQL type, operation (query/mutation/subscription field), or directive. Without includeReferencedTypes, the SDL is followed by a one-level manifest of every directly referenced type\'s field names (e.g. "input ActionOperationInput { addTags, removeTags }"), so you can see what nested types contain before fetching them. Set includeReferencedTypes to instead pull in the full SDL of every type it references transitively \u2014 the whole structural subgraph in one call, ideal for complete exploration of an entity (e.g. Book and all the types it touches). That traversal only follows what the target depends on; to go the other direction and find the members that use a type, call get-graphql-type-list with `referencesType`.',schema:E,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"string"}},{name:"get-graphql-schema",title:"Get GraphQL schema",description:"Get the complete GraphQL schema as SDL \u2014 the whole type graph in one call. Returns everything, so it can be very large and token-expensive for big schemas; prefer get-graphql-type-list (filter/paginate) plus targeted get-graphql-type calls, and reach for this only for small schemas or when you truly need the full SDL.",schema:N,annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},outputSchema:{type:"string"}}]}function d(e,t){const h=e&&e.length>0,m=t&&t.length>0;return{name:"search",title:"Search documentation",description:"Search across the documentation to fetch relevant content for a given query",schema:{type:"object",required:["query"],additionalProperties:!1,properties:{query:{type:"string",description:"Search query. Should be a single word or that phrase that is presented in a documentation.",minLength:1},...h?{product:{type:"string",description:"Optional product name to filter search results by specific product.",enum:[...e,null],nullable:!0}}:{},...m?{locale:{type:"string",description:"Optional locale code to filter search results by documentation language (e.g. 'en', 'ja'). Use the locale matching the language of the user's request. Defaults to the project's default locale.",enum:[...t,null],nullable:!0}}:{}}},annotations:{readOnlyHint:!0,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},outputSchema:{type:"string"}}}const Q=new Set([...I({requiresLogin:!0,hasGraphqlApis:!0,elicitationEnabled:!0,hasCallableApis:!0}).map(e=>e.name),d().name]);export{Q as ALL_DEFAULT_TOOL_NAMES,I as getDefaultToolSchemas};

package/dist/server/plugins/mcp/docs-mcp/tools/core/create-anonymous-session.d.ts

@@ -1,11 +0,0 @@
-import type { McpToolContext, McpToolHandler } from '../../../types.js';
-export type CreateAnonymousSessionArgs = Record<string, never>;
-export declare function isAnonymousSessionToolAvailable(context: McpToolContext): boolean;
-declare const _default: {
-    createAnonymousSession: {
-        execute: McpToolHandler<CreateAnonymousSessionArgs>;
-        isAvailable: typeof isAnonymousSessionToolAvailable;
-    };
-};
-export default _default;
-//# sourceMappingURL=create-anonymous-session.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/core/create-anonymous-session.js

@@ -1 +0,0 @@
-import{CREATE_ANONYMOUS_SESSION_TOOL_NAME as t}from"../../../constants.js";import{isFetchCapable as o}from"../../../gateway-mcp/callable-apis.js";import{createSessionHandle as n}from"../../../gateway-mcp/subject.js";const i=async()=>{const e={sessionHandle:n()};return{content:[{type:"text",text:JSON.stringify(e)}],structuredContent:e}};function s(e){return!!e.elicitationEnabled&&e.mcpMode==="code"&&o(e)&&!e.user?.isAuthenticated}var u={[t]:{execute:i,isAvailable:s}};export{u as default,s as isAnonymousSessionToolAvailable};

package/dist/server/plugins/mcp/docs-mcp/tools/core/search.d.ts

@@ -1,7 +0,0 @@
-import type { McpToolHandler } from '../../../types.js';
-import type { SearchArgs } from './types.js';
-declare const _default: {
-    search: McpToolHandler<SearchArgs>;
-};
-export default _default;
-//# sourceMappingURL=search.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/core/search.js

@@ -1,6 +0,0 @@
-import{removeTrailingSlash as g,withPathPrefix as y,withoutPathPrefix as E}from"@redocly/theme/core/utils";import{ServerRoutes as L}from"../../../../../../constants/api.js";import{DEFAULT_LOCALE_PLACEHOLDER as S}from"../../../../../../constants/common.js";const w=async(n,t)=>{const{query:e,product:o,locale:l}=n,u=t.config.l10n?.defaultLocale||S,h=JSON.stringify({query:e,...o?{product:o}:{},locale:l||u}),f=`${t.internalBaseUrl||t.baseUrl}${y(L.SEMANTIC_SEARCH)}`,s=t.accessToken?`authorization=${String(t.accessToken).replace(/^Bearer /,"")}`:"";try{const a=await fetch(f,{method:"POST",credentials:"include",headers:{"Content-Type":"application/json",...s?{Cookie:s}:{}},body:h});if(!a.ok)return{content:[{type:"text",text:"Error retrieving search results."}],isError:!0};const p=await a.json(),d=new Set(t.searchIgnoredRoutes??[]),i=(p||[]).filter(r=>!R(r.url,d));if(i.length===0)return{content:[{type:"text",text:"No results found."}]};const m=r=>{try{return new URL(r,t.baseUrl).toString()}catch{return r}},c=i.map(r=>`### [${r.title}](${m(r.url)})
-
-${r.content}
-`).join(`
-
-`).trim();return{content:[{type:"text",text:c.length?c:"No results found."}]}}catch{return{content:[{type:"text",text:"Error retrieving search results."}],isError:!0}}};function R(n,t){if(t.size===0)return!1;let e;try{e=new URL(n,"https://relative.invalid").pathname}catch{return!1}e=g(E(e));try{e=decodeURI(e)}catch{}return t.has(e)}var v={search:w};export{v as default};

package/dist/server/plugins/mcp/docs-mcp/tools/core/submit-feedback.d.ts

@@ -1,7 +0,0 @@
-import type { McpToolHandler } from '../../../types.js';
-import type { SubmitFeedbackArgs } from './types.js';
-declare const _default: {
-    "submit-feedback": McpToolHandler<SubmitFeedbackArgs>;
-};
-export default _default;
-//# sourceMappingURL=submit-feedback.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/core/submit-feedback.js

@@ -1,3 +0,0 @@
-import{getPathPrefix as p,withPathPrefix as h,withoutPathPrefix as l}from"@redocly/theme/core/utils";import{ServerRoutes as g}from"../../../../../../constants/api.js";import{normalizeRouteSlug as b}from"../../../../../../utils/path/normalize-route-slug.js";import{SUBMIT_FEEDBACK_TOOL_NAME as y}from"../../../constants.js";const k="mcp",P="mcp-client";function r(t,e=!1){return{content:[{type:"text",text:JSON.stringify(t)}],isError:e}}function i(t){const e=t?.trim();return e||void 0}function U(t){const e=p();return!!e&&(t===e||t.startsWith(`${e}/`))?l(t):t}function F(t,e){try{const{pathname:n}=new URL(t,e),a=new URL(e);return a.pathname=U(b(n)),a.toString()}catch{return}}function T(t){const e=t.client??P;return t.clientVersion?`${e}/${t.clientVersion}`:e}async function A(t){const n=(await t.json().catch(()=>{}))?.errors;return Array.isArray(n)?n.filter(a=>typeof a=="string"):[]}const E=async(t,e)=>{const n=i(t.path),a=i(t.summary);if(!n||!a)return r({error:"Invalid arguments",message:"`path` and `summary` are required."},!0);const c=e.baseUrl;if(!c)return r({error:"Unavailable",message:"The feedback endpoint of this site is not configured."},!0);const s=F(n,c);if(!s)return r({error:"Invalid arguments",message:"`path` must be a page path or URL of this site."},!0);const u=i(t.details),d=T(e),f=e.accessToken?.replace(/^Bearer /,""),m=`${e.internalBaseUrl||c}${h(g.FEEDBACK)}`;let o;try{o=await fetch(m,{method:"POST",headers:{"Content-Type":"application/json","User-Agent":d,...f?{Cookie:`authorization=${f}`}:{},...e.clientIp?{"X-Real-IP":e.clientIp}:{}},body:JSON.stringify({component:"comment",path:s,comment:u?`${a}
-
-${u}`:a,agent:d,targetFeature:i(t.targetFeature),origin:k})})}catch{return r({error:"Failed to submit feedback",message:"The feedback endpoint could not be reached."},!0)}return o.status===403?r({error:"Forbidden",message:"You have no access to this page, so feedback for it is not accepted."},!0):o.status===404?r({error:"Not found",message:`No page exists at ${s}.`},!0):o.status===400?r({error:"Invalid feedback",errors:await A(o)},!0):o.ok?r({status:"received",page:s,message:"Thanks for your feedback. The documentation team sees it on the Feedback page."}):r({error:"Failed to submit feedback",message:`The feedback endpoint answered ${o.status}.`},!0)};var N={[y]:E};export{N as default};

package/dist/server/plugins/mcp/docs-mcp/tools/core/types.d.ts

@@ -1,13 +0,0 @@
-export type SearchArgs = {
-    query: string;
-    product?: string | null;
-    locale?: string | null;
-};
-export type WhoamiArgs = Record<string, never>;
-export type SubmitFeedbackArgs = {
-    path: string;
-    summary: string;
-    details?: string;
-    targetFeature?: string;
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/core/utils.d.ts

@@ -1,3 +0,0 @@
-import type { SearchItemData } from '@redocly/theme/core/types';
-export declare function processDocuments(documents: Record<string, SearchItemData[]>, outdir: string): string;
-//# sourceMappingURL=utils.d.ts.map

package/dist/server/plugins/mcp/docs-mcp/tools/core/utils.js

@@ -1,11 +0,0 @@
-import c from"node:fs";import f from"node:path";import{MAX_DOCUMENTS_PER_CATEGORY as $}from"../../../constants.js";function j(m,u){return Object.entries(m).map(([h,s])=>{if(!s||s.length===0)return"";const x=s.slice(0,$).map(d=>{const{document:t,highlight:o}=d,p=o?.title||(Array.isArray(t.title)?t.title[0]:t.title);let n=`Document: ${t.title}`;n+=`### [${p}](${t.url})
-
-`;let r;if(t.url)try{let e=t.url.startsWith("/")?t.url.slice(1):t.url;const i=e.indexOf("#");i!==-1&&(e=e.substring(0,i));const l=f.extname(e);l&&(e=e.slice(0,-l.length));let y=e+".md";const a=f.join(u,y);c.existsSync(a)&&(r=c.readFileSync(a,"utf8"))}catch{}return r||(r=o?.text||(Array.isArray(t.text)?t.text[0]:t.text)),n+=r,t.facets&&(n+=`
-
-**Categories:**
-`,Object.entries(t.facets).forEach(([e,i])=>{n+=`- ${e}: ${i}
-`})),n});return`## ${h}
-
-${x}`}).join(`
-
-`).trim()}export{j as processDocuments};

package/dist/server/plugins/mcp/docs-mcp/tools/core/whoami.d.ts

@@ -1,7 +0,0 @@
-import type { McpToolHandler } from '../../../types.js';
-import type { WhoamiArgs } from './types.js';
-declare const _default: {
-    whoami: McpToolHandler<WhoamiArgs>;
-};
-export default _default;
-//# sourceMappingURL=whoami.d.ts.map