@redocly/redoc-reef 0.138.0-next.13 → 0.138.0-next.15

package/dist/server/web-server/routes/catalog/helpers/create-entity-update-schema.js

@@ -1 +0,0 @@
-import{entityFileSchema as o,entityBaseProperties as p}from"@redocly/config";function a(r,t){const i=o.oneOf.find(e=>e.properties.type.const===t);if(!i){const e=Object.keys(r.entityTypes??{}).find(n=>n===t);if(!e)throw new Error(`Entity type: ${t} not found`);return{type:"object",properties:{...p,type:{const:e},metadata:{additionalProperties:!0,...r.entityTypes?.[e].metadataSchema},revision:{type:"string"}},additionalProperties:!1}}return{properties:{...i.properties,revision:{type:"string"}},additionalProperties:!1}}export{a as createEntityUpdateSchema};

package/dist/server/web-server/routes/catalog/helpers/has-access-to-entity.d.ts

@@ -1,10 +0,0 @@
-import type { Context } from 'hono';
-import type { Store } from '../../../../store';
-export declare function hasAccessToEntity({ ctx, store, accessLevel, entityType, entityKey, }: {
-    ctx: Context;
-    store: Store;
-    accessLevel: 'READ' | 'WRITE';
-    entityType: string;
-    entityKey: string;
-}): boolean;
-//# sourceMappingURL=has-access-to-entity.d.ts.map

package/dist/server/web-server/routes/catalog/helpers/has-access-to-entity.js

@@ -1 +0,0 @@
-import{getNotAccessibleCatalogResources as u}from"../../../../plugins/catalog-entities/utils/get-not-accessible-catalog-resources.js";import{getCurrentRbacTeams as f}from"../../helpers/get-current-rbac-teams.js";function g({ctx:e,store:t,accessLevel:s,entityType:c,entityKey:r}){const n=t.getConfig().access?.rbac||{},o=f(e),{types:i,entities:a}=u({rbacConfig:n,currentRbacTeams:o,accessLevel:s});return!(i.includes(c)||a.includes(r))}export{g as hasAccessToEntity};

package/dist/server/web-server/routes/catalog/helpers/upsert-pages-stats.d.ts

@@ -1,12 +0,0 @@
-import type { Context } from 'hono';
-import type { CatalogEntitiesService } from '../../../../plugins/catalog-entities/database/catalog-entities-service';
-import type { EntityReadModelSchema } from '../../../../plugins/catalog-entities/schemas/read-model-schemas';
-type UpsertPagesStatsParams = {
-    ctx: Context;
-    catalogEntitiesService: CatalogEntitiesService;
-    addedEntities?: EntityReadModelSchema[];
-    removedEntities?: EntityReadModelSchema[];
-};
-export declare function upsertPagesStats({ ctx, catalogEntitiesService, addedEntities, removedEntities, }: UpsertPagesStatsParams): Promise<void>;
-export {};
-//# sourceMappingURL=upsert-pages-stats.d.ts.map

package/dist/server/web-server/routes/catalog/helpers/upsert-pages-stats.js

@@ -1 +0,0 @@
-import{envConfig as t}from"../../../../config/env-config.js";import{fetchWithClient as c}from"../../../../utils/fetch-with-client.js";async function h({ctx:r,catalogEntitiesService:s,addedEntities:n,removedEntities:i}){if(!t.isProductionEnv){r.get("logger").info("Skipping pages stats upsert in non-production environment");return}if(!t.BH_API_URL||!t.ORGANIZATION_ID||!t.PROJECT_ID)throw new Error("Pages stats service not configured");const o=r.req.header("apiKey");if(!o)throw new Error("API key is required to upsert pages stats");const{total:a}=await s.getEntitiesCount("remote",n,i?.length),p={remoteEntityPages:a,isReported:!1},g=new URL(`/api/orgs/${t.ORGANIZATION_ID}/projects/${t.PROJECT_ID}/project-pages-stats`,t.BH_API_URL).toString();try{const e=await c(g,{method:"PUT",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o}`},body:JSON.stringify(p)});if(!e.ok)throw new Error(e.statusText)}catch(e){throw new Error(`Failed to upsert project pages stats: ${e?.message}`)}}export{h as upsertPagesStats};

package/dist/server/web-server/routes/catalog/mappers/map-entity-read-model-schema-to-entity-read-dto.d.ts

@@ -1,4 +0,0 @@
-import type { EntityReadModelSchema } from '../../../../plugins/catalog-entities/schemas/read-model-schemas';
-import type { EntityReadDto } from '../dto/read-entity-dto.js';
-export declare function mapEntityReadModelSchemaToEntityReadDto(entity: EntityReadModelSchema | null): EntityReadDto | null;
-//# sourceMappingURL=map-entity-read-model-schema-to-entity-read-dto.d.ts.map

package/dist/server/web-server/routes/catalog/mappers/map-entity-read-model-schema-to-entity-read-dto.js

@@ -1 +0,0 @@
-function r(a){return a?{id:a.id,organizationId:a.organizationId,projectId:a.projectId,type:a.type,key:a.key,title:a.title,summary:a.summary,tags:a.tags,metadata:a.metadata,git:a.git,contact:a.contact,links:a.links,source:a.source,sourceFile:a.sourceFile,version:a.version,revision:a.revision,isCurrent:a.isCurrent,isDefaultVersion:a.isDefaultVersion,object:"catalogEntity",createdAt:a.createdAt,updatedAt:a.updatedAt}:null}export{r as mapEntityReadModelSchemaToEntityReadDto};

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entities.d.ts

@@ -1,3 +0,0 @@
-import type { EntitiesCatalogConfig } from '@redocly/config';
-export declare function parseEntities(entities: unknown[], catalogConfig: EntitiesCatalogConfig): import("@redocly/config").EntityBaseFileSchema[];
-//# sourceMappingURL=parse-entities.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entities.js

@@ -1 +0,0 @@
-import{createValidator as a}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";import{createEntitySchema as e}from"../../helpers/create-entity-schema.js";function m(t,i){const r={type:"array",items:e(i)};return a(r,{errorPrefix:"Entity validation failed:",dataVar:"entity"})(t)}export{m as parseEntities};

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entity-update-data.d.ts

@@ -1,3 +0,0 @@
-import type { EntitiesCatalogConfig } from '@redocly/config';
-export declare function parseEntityUpdateData(entityUpdateData: unknown, catalogConfig: EntitiesCatalogConfig, entityType: string): Partial<import("@redocly/config").EntityBaseFileSchema>;
-//# sourceMappingURL=parse-entity-update-data.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entity-update-data.js

@@ -1 +0,0 @@
-import{createValidator as i}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";import{createEntityUpdateSchema as n}from"../../helpers/create-entity-update-schema.js";function y(t,a,e){const r=n(a,e);return i(r,{errorPrefix:"Entity validation failed:",dataVar:"entity"})(t)}export{y as parseEntityUpdateData};

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entity.d.ts

@@ -1,3 +0,0 @@
-import type { EntitiesCatalogConfig } from '@redocly/config';
-export declare function parseEntity(entity: unknown, catalogConfig: EntitiesCatalogConfig): import("@redocly/config").EntityBaseFileSchema;
-//# sourceMappingURL=parse-entity.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/entities/parse-entity.js

@@ -1 +0,0 @@
-import{createValidator as i}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";import{createEntitySchema as e}from"../../helpers/create-entity-schema.js";function y(t,r){const a=e(r);return i(a,{errorPrefix:"Entity validation failed:",dataVar:"entity"})(t)}export{y as parseEntity};

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entities-relations.d.ts

@@ -1,13 +0,0 @@
-export declare const parseEntitiesRelations: (data: unknown) => {
-    fileHash?: string | null | undefined;
-    isDeleted?: boolean | null | undefined;
-    sourceFile?: string | null | undefined;
-    sourceKey: string;
-    sourceRevision?: string | null | undefined;
-    sourceVersion?: string | null | undefined;
-    targetKey: string;
-    targetRevision?: string | null | undefined;
-    targetVersion?: string | null | undefined;
-    type: "compatibleWith" | "consumes" | "createdBy" | "creates" | "dependencyOf" | "dependsOn" | "extendedBy" | "extends" | "hasMember" | "hasParts" | "implementedBy" | "implements" | "linksTo" | "memberOf" | "ownedBy" | "owns" | "partOf" | "produces" | "relatesTo" | "returnedBy" | "returns" | "supersededBy" | "supersedes" | "triggeredBy" | "triggers" | "usedBy" | "uses";
-}[];
-//# sourceMappingURL=parse-entities-relations.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entities-relations.js

@@ -1 +0,0 @@
-import{entitiesRelationsDtoSchema as t}from"../../../../../plugins/catalog-entities/schemas/dto-schemas.js";import{createValidator as i}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";const r=i(t,{errorPrefix:"Entities relations validation failed:",dataVar:"relation"});export{r as parseEntitiesRelations};

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entity-relation-update-data.d.ts

@@ -1,13 +0,0 @@
-export declare function parseEntityRelationUpdateData(relationUpdateData: unknown): Partial<{
-    fileHash?: string | null | undefined;
-    isDeleted?: boolean | null | undefined;
-    sourceFile?: string | null | undefined;
-    sourceKey: string;
-    sourceRevision?: string | null | undefined;
-    sourceVersion?: string | null | undefined;
-    targetKey: string;
-    targetRevision?: string | null | undefined;
-    targetVersion?: string | null | undefined;
-    type: "compatibleWith" | "consumes" | "createdBy" | "creates" | "dependencyOf" | "dependsOn" | "extendedBy" | "extends" | "hasMember" | "hasParts" | "implementedBy" | "implements" | "linksTo" | "memberOf" | "ownedBy" | "owns" | "partOf" | "produces" | "relatesTo" | "returnedBy" | "returns" | "supersededBy" | "supersedes" | "triggeredBy" | "triggers" | "usedBy" | "uses";
-}>;
-//# sourceMappingURL=parse-entity-relation-update-data.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entity-relation-update-data.js

@@ -1 +0,0 @@
-import{createValidator as e}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";import{createEntityRelationUpdateSchema as i}from"../../helpers/create-entity-relation-update-schema.js";function l(t){const a=i();return e(a,{errorPrefix:"Entity relation validation failed:",dataVar:"relation"})(t)}export{l as parseEntityRelationUpdateData};

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entity-relation.d.ts

@@ -1,13 +0,0 @@
-export declare const parseEntityRelation: (data: unknown) => {
-    fileHash?: string | null | undefined;
-    isDeleted?: boolean | null | undefined;
-    sourceFile?: string | null | undefined;
-    sourceKey: string;
-    sourceRevision?: string | null | undefined;
-    sourceVersion?: string | null | undefined;
-    targetKey: string;
-    targetRevision?: string | null | undefined;
-    targetVersion?: string | null | undefined;
-    type: "compatibleWith" | "consumes" | "createdBy" | "creates" | "dependencyOf" | "dependsOn" | "extendedBy" | "extends" | "hasMember" | "hasParts" | "implementedBy" | "implements" | "linksTo" | "memberOf" | "ownedBy" | "owns" | "partOf" | "produces" | "relatesTo" | "returnedBy" | "returns" | "supersededBy" | "supersedes" | "triggeredBy" | "triggers" | "usedBy" | "uses";
-};
-//# sourceMappingURL=parse-entity-relation.d.ts.map

package/dist/server/web-server/routes/catalog/parsers/relations/parse-entity-relation.js

@@ -1 +0,0 @@
-import{entityRelationDtoSchema as t}from"../../../../../plugins/catalog-entities/schemas/dto-schemas.js";import{createValidator as a}from"../../../../../plugins/catalog-entities/utils/ajv-validator.js";const o=a(t,{errorPrefix:"Entity relation validation failed:",dataVar:"relation"});export{o as parseEntityRelation};

package/dist/server/web-server/routes/cors-proxy.d.ts

@@ -1,7 +0,0 @@
-import type { Context } from 'hono';
-import type { Store } from '../../store.js';
-export declare function corsProxyHandler(store?: Store, proxyBasePath?: string): (ctx: Context) => Promise<Response>;
-export declare function isPrivateIp(rawIp: string): boolean;
-export declare function resolveCorsProxyTarget(requestUrl: string, proxyBasePath: string): URL | null;
-export declare const CORS_PROXY_STREAM_HEADER = "x-redocly-proxy-streaming";
-//# sourceMappingURL=cors-proxy.d.ts.map

package/dist/server/web-server/routes/cors-proxy.js

@@ -1,2 +0,0 @@
-import D from"node:dns";import{isIP as x}from"node:net";import{Agent as M}from"undici";import{withPathPrefix as $}from"@redocly/theme/core/utils";import{ServerRoutes as N}from"../../../constants/api.js";import{envConfig as S}from"../../config/env-config.js";import{getRequestOrigin as b}from"../utils/get-request-origin.js";import{SsrfBlockedError as U}from"../utils/ssrf-blocklist.js";import{createSsrfSafeLookup as W}from"../utils/ssrf-safe-lookup.js";const z=new Set(["connection","keep-alive","proxy-authenticate","proxy-connection","proxy-authorization","te","trailer","transfer-encoding","upgrade","host"]),Y=new Set(["cookie","cookie2","accept-encoding"]),B=new Set(["set-cookie","set-cookie2","content-encoding","content-length","clear-site-data","strict-transport-security","alt-svc","nel","report-to","reporting-endpoints","set-login","accept-ch","critical-ch","service-worker-allowed"]),v="x-redocly-proxy-streaming",P="x-http-method-override",T="x-redocly-cookie",A="Requests to private network addresses are not allowed",F=new M({connect:{lookup:W()}});function me(t,e=$(N.CORS_PROXY)){const n=async r=>{const s=new URL(r.req.url).pathname;if(s===e||s===`${e}/`)return r.text(`Realm CORS proxy endpoint.
-Usage: ${e}/https://api.example.com/path`);const i=oe(r.req.url,e);if(!i)return r.text("Invalid proxied URL",400);const l=t?.getConfig().corsProxy?.allowedTargets;if(l&&l.length>0&&!l.some(p=>te(i,p)))return r.text("Target URL is not in the allowed list for CORS proxy",403);const m=b(r),g=i.origin===m,w=i.pathname===e||i.pathname.startsWith(`${e}/`);if(g&&!w)return new Response("Please use a direct request",{status:308,headers:{Location:i.toString(),Vary:"origin"}});const u=await J(i.hostname),R=!S.isDevelopMode||S.isReunite;if(R&&u&&K(u))return r.text(A,403);const a=new Headers,C=I(r.req.raw.headers);for(const[o,p]of r.req.raw.headers)C.has(o.toLowerCase())||Y.has(o.toLowerCase())||a.append(o,p);const E=a.get(T);E&&(a.set("cookie",E),a.delete(T));const k=r.req.raw.headers.get("origin")||"";j(k)&&a.delete("origin");let f=r.req.method;const y=a.get(P);y&&(f=y.toUpperCase(),a.delete(P));const h={method:f,headers:a,redirect:"manual"};R&&(h.dispatcher=F),f!=="GET"&&f!=="HEAD"&&r.req.raw.body&&(h.body=r.req.raw.body,h.duplex="half");let c;try{c=await fetch(i,h)}catch(o){if(o instanceof Error&&o.cause instanceof U)return r.text(A,403);const p=o instanceof Error?o.message:"unknown error",L=o instanceof Error&&o.cause instanceof Error?`: ${o.cause.message}`:"";return r.text(`Failed to proxy request: ${p}${L}`,502)}const H=r.req.raw.headers.get("sec-fetch-mode");if((H==="navigate"||H==="no-cors")&&ne(c))return r.text("Direct browser navigation to proxied HTML, JavaScript, or redirect responses is not allowed",403);const d=new Headers(c.headers),q=I(c.headers);for(const o of q)d.delete(o);for(const o of B)d.delete(o);return d.set(v,"1"),d.set("x-content-type-options","nosniff"),d.has("content-type")||d.set("content-type","text/plain"),new Response(c.body,{status:c.status,statusText:c.statusText,headers:d})};return async r=>{const s=await n(r);return s.headers.set("cache-control","no-store"),s}}function G(t){try{return decodeURIComponent(t)}catch{return t}}function V(t){return t.replace(/^(https?):\/(?!\/)/i,"$1://")}function X(t,e){return e?t.includes("?")?e==="?"?t:`${t.endsWith("?")||t.endsWith("&")?t:`${t}&`}${e.slice(1)}`:`${t}${e}`:t}function I(t){const e=new Set(z),n=t.get("connection");if(!n)return e;for(const r of n.split(",")){const s=r.trim().toLowerCase();s&&e.add(s)}return e}function j(t){const e=t.toLowerCase();return e.includes(".redocly.app")||e.includes("localhost")}async function J(t){const e=O(t);if(x(e))return e;try{const{address:n}=await D.promises.lookup(e);return n}catch{return null}}function K(t){const e=O(t).toLowerCase();if(!x(e))return!0;const n=Q(e);return n?_(n):e.includes(":")?Z(e):_(e)}function O(t){return t.startsWith("[")&&t.endsWith("]")?t.slice(1,-1):t}function Q(t){const e=t.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);if(e){const r=parseInt(e[1],16),s=parseInt(e[2],16);return[r>>8&255,r&255,s>>8&255,s&255].join(".")}return t.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i)?.[1]??null}function _(t){const e=t.split(".").map(Number);if(e.length!==4||e.some(s=>isNaN(s)))return!0;const[n,r]=e;return n===0||n===10||n===127||n===172&&r>=16&&r<=31||n===192&&r===168||n===169&&r===254||n===100&&r>=64&&r<=127}function Z(t){const e=ee(t);return t==="::1"||t==="::"||e!==null&&(e&65024)===64512||e!==null&&(e&65472)===65152}function ee(t){const[e]=t.split(":");if(!e)return null;const n=parseInt(e,16);return Number.isNaN(n)?null:n}function te(t,e){let n;try{n=new URL(e)}catch{return!1}if(t.origin!==n.origin)return!1;const r=n.pathname.endsWith("/")?n.pathname:`${n.pathname}/`;return t.pathname.startsWith(r)||t.pathname===n.pathname}function ne(t){const e=t.status>=300&&t.status<400&&t.headers.has("location")||t.headers.has("refresh"),n=t.status===401&&t.headers.has("www-authenticate");return e||n||re(t.headers.get("content-type")||"")}function re(t){const e=t.toLowerCase();return e.includes("text/html")||e.includes("javascript")||e.includes("application/xhtml")||e.includes("application/xml")||e.includes("text/xml")||e.includes("ecmascript")||e.includes("image/svg")}function oe(t,e){const n=new URL(t),r=n.pathname===e,s=n.pathname.startsWith(`${e}/`);if(!r&&!s)return null;const i=n.pathname.slice(e.length).replace(/^\/+/,"");if(!i)return null;const l=[i,G(i)];for(const m of l){const g=V(m),w=X(g,n.search);try{const u=new URL(w);if(u.protocol==="http:"||u.protocol==="https:")return u}catch{continue}}return null}const ge=v;export{ge as CORS_PROXY_STREAM_HEADER,me as corsProxyHandler,K as isPrivateIp,oe as resolveCorsProxyTarget};

package/dist/server/web-server/routes/dynamic-route.d.ts

@@ -1,6 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../store';
-import type { RouteDataResolver, StaticAssetReader } from './index';
-import type { LlmsTxtGenerator } from '../../types';
-export declare function dynamicRouteHandler(store: Store, resolveRouteData: RouteDataResolver, readStaticAsset: StaticAssetReader, llmsTxtGenerator?: LlmsTxtGenerator): Handler;
-//# sourceMappingURL=dynamic-route.d.ts.map

package/dist/server/web-server/routes/dynamic-route.js

@@ -1 +0,0 @@
-import m from"path";import{realpath as N}from"fs/promises";import{REDOCLY_ROUTE_RBAC as Y,REDOCLY_TEAMS_RBAC as z}from"@redocly/config";import{combineUrls as $,withoutPathPrefix as ne,withPathPrefix as T}from"@redocly/theme/core/utils";import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as k,CACHE_CONTROL_PUBLIC_HTML as oe,DEFAULT_IMMUTABLE_CACHE_MAX_AGE as re,STATIC_DATA_FOLDER as ie,X_REDOCLY_CACHE_CONTROL_HEADER as ae,X_REDOCLY_CACHE_CONTROL_PUBLIC_HTML as se}from"../../constants/common.js";import{removeTrailingSlash as ce}from"../../../utils/url/remove-trailing-slash.js";import{findInIterable as le}from"../../../utils/collection/find-in-iterable.js";import{sanitizeRedirectPathname as me}from"../../../utils/url/sanitize-redirect-pathname.js";import{envConfig as ue}from"../../config/env-config.js";import{sanitizePath as de}from"../../../utils/path/sanitize-path.js";import{normalizeRouteSlug as fe}from"../../../utils/path/normalize-route-slug.js";import{isPathInFolder as G}from"../../../utils/path/is-path-in-folder.js";import{getLlmsTxtMdPathBySlug as ge}from"../../utils/llmstxt/get-llms-txt-md-path-by-slug.js";import{resolveLlmsTxtMd as j}from"../../utils/llmstxt/resolve-llms-txt-md.js";import{removeLeadingSlash as pe}from"../../../utils/url/remove-leading-slash.js";import{AI_INDEX_EXPORT_FOLDER as he,SEARCH_DATA_EXPORT_FOLDER as Re}from"../../constants/plugins/search.js";import{processRedirects as Ce}from"./helpers/process-redirects.js";import{renderPage as Ae,getServerProps as Ee}from"../../ssr/index.js";import{canAccessAsset as Le,canAccessResource as V}from"../../utils/rbac.js";import{handleErrorPageRender as w,handleUnauthorized as W,handleUnauthorizedAsset as Z}from"../utils.js";import{DEFAULT_MAX_AGE_FOR_MIME_TYPE as _e,MIME_TYPES as Te}from"../mime-types.js";import{fileExistsAsync as we}from"../../utils/index.js";import{isAiAgentRequest as Oe}from"../../utils/ai-agent-detection.js";import{getRedirectRoute as Pe}from"../utils/legacy-openapi-redirects.js";import{getContentTypeHeaderValue as x}from"../utils/content-type.js";import{telemetry as ye}from"../../../cli/telemetry/index.js";import{telemetry as Ue}from"../../telemetry/index.js";const Me=[Re,he,ie];async function be(e,p){if(m.extname(e)===".md")return!1;try{const[h,u]=await Promise.all([N(e),N(p)]);return Me.some(t=>G(h,m.join(u,t)))}catch{return!1}}function at(e,p,h,u){return async t=>{const O=t.get("logger"),r=t.req,c=new URL(r.url),i=ne(de(decodeURIComponent(c.pathname))),P=m.parse(i).ext===".md",y=Oe({accept:r.header("accept"),signatureAgent:r.header("signature-agent"),signature:r.header("signature"),signatureInput:r.header("signature-input"),userAgent:r.header("user-agent")}),a=fe(i),o=(r.method==="GET"||r.method==="HEAD")&&!P?e.getRouteBySlug(a,{followRedirect:!1})||le(e.routesBySlug?.values(),n=>n.hasClientRoutes&&(i===n.slug||i.startsWith(n.slug+"/"))):void 0,U=e.getRedirect(a);if(U){const n=Ce({redirect:U,reqUrlSearch:c.search});return Ue.sendRedirectMessage([{id:a,object:"redirect",uri:`urn:redocly:realm:api:redirect:${a}`,from:a,templateId:n.type.toString()}]),t.newResponse(null,n.type,{Location:n.location})}const R=ue.isProductionEnv?301:302;if(o?.metadata?.type==="openapi"){const n=Pe(c.pathname);if(n)return O.info("Legacy OpenAPI docs redirect from "+c.pathname),t.newResponse(null,R,{Location:encodeURI(n)});if(c.pathname.match(/[A-Z]/))return O.warn("Redirect to lowercase route to avoid 404 error"),t.newResponse(null,R,{Location:encodeURI(c.pathname.toLowerCase())})}if(i.endsWith("/")&&i!=="/"){const n=me(new URL(a||"/",t.req.url).pathname);return t.newResponse(null,R,{Location:encodeURI(T((n==="/"?"/":ce(n))+c.search))})}const{isAuthenticated:d,teams:C,claims:{email:A}}=t.get("auth");if(o&&!V(o,{isAuthenticated:d,email:A,teams:C},e.config.access?.rbac,e.config.access?.requiresLogin))return d?w(t,e,{slug:o.slug,[z]:o[z],[Y]:o[Y]},403):W(t,e,o.slug);const f=o&&y?ge(o.slug):void 0,M=f?await j(f,e,u):void 0,b=M?.exists??!1;if(o&&(!y||!b)){const n=await p(o),K=await Ee(o,t,n,e),{html:Q,statusCode:q,error:ee}=await Ae(o,K,t,e,ye),v=e.config.access?.rbac,B=!e.config.access?.requiresLogin&&(!v||!Object.keys(v).length),X=q>=400||!!ee||!!e.compilationErrors?.length,te=B&&!X;let g;return X?g=k:B?g=oe:g="private",t.html(Q,q,{"Cache-Control":g,...te&&{[ae]:se}})}const E=f&&b?f:i,J=pe(E),s=m.resolve(e.outdir,J);if(!G(s,e.outdir))return Z(t);if(await be(s,e.outdir))return w(t,e,{slug:a},404);let l,D;if(P){const n=await j(i,e,u);if(l=n.route,D=n.content,l&&!V(l,{isAuthenticated:d,email:A,teams:C},e.config.access?.rbac,e.config.access?.requiresLogin))return W(t,e,i)}const I=e.getGlobalConfig("access");if(!Le(E,I?.rbac||{},I?.requiresLogin||!1,e.getGlobalConfig("directoryPaths"),{isAuthenticated:d,email:A,teams:C}))return Z(t);const L=Te[m.extname(s)]||"text/plain",_=s.match(/assets\/.*\.[a-f0-9]{8,}\..+/)||s.match(/runtime\/chunks\/.*/)?re:_e[L],S=_?{"Cache-Control":`public, max-age=${_}, immutable`,Expires:new Date(Date.now()+_*1e3).toUTCString()}:{"Cache-Control":k},F=r.query("download")!=null,H=M?.content??D;if(H!==void 0)return t.newResponse(H,200,{"Content-Type":x(L),"Access-Control-Allow-Origin":"*",...S,...l&&{"X-Robots-Tag":"noindex, follow",...e.config.seo?.siteUrl&&{Link:`<${$(e.config.seo.siteUrl,T(l.slug))}>; rel="canonical"`}},...F&&{"Content-Disposition":`attachment; filename="${m.basename(E)}"`}});if(await we(s)){const n=await h(s);return t.newResponse(n,200,{"Content-Type":x(L),"Access-Control-Allow-Origin":"*",...S,...l&&{"X-Robots-Tag":"noindex, follow",...e.config.seo?.siteUrl&&{Link:`<${$(e.config.seo.siteUrl,T(l.slug))}>; rel="canonical"`}},...F&&{"Content-Disposition":`attachment; filename="${m.basename(s)}"`}})}else return w(t,e,{slug:a},404)}}export{at as dynamicRouteHandler};

package/dist/server/web-server/routes/eject.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../store';
-export declare function ejectComponentDataHandler(store: Store): Handler;
-//# sourceMappingURL=eject.d.ts.map

package/dist/server/web-server/routes/eject.js

@@ -1 +0,0 @@
-import i from"../../../cli/eject/ejectComponent.js";import p from"../../../cli/eject/resolveEjectParams.js";function d(n){return async e=>{const t=e.get("logger"),r=decodeURIComponent(e.req.param("componentName")),c=e.req.query("force");if(!r)return e.text("Bad request. Missing component name",400);const a=new Promise(o=>{const m={_:["component",r],"project-dir":n.contentDir,force:c==="true",onSuccess:s(200,o),onError:s(404,o),onOverride:s(409,o),config:n.config};u(m)});try{return await a}catch(o){return t.error(o),e.text("Server error",500)}}}async function u(n){const e=await p(n);if(!e)return!1;const{pathToThemeFolder:t,pathToPortalCustomThemeFolder:r,componentToEject:c,theme:a,options:o}=e;return i({pathToThemeFolder:t,pathToPortalCustomThemeFolder:r,componentToEject:c,theme:a},o)}function s(n,e){return t=>{e(new Response(JSON.stringify({message:t}),{status:n,headers:{"content-type":"application/json"}}))}}export{d as ejectComponentDataHandler};

package/dist/server/web-server/routes/error.d.ts

@@ -1,3 +0,0 @@
-import type { ErrorHandler } from 'hono';
-export declare const errorHandler: ErrorHandler;
-//# sourceMappingURL=error.d.ts.map

package/dist/server/web-server/routes/error.js

@@ -1 +0,0 @@
-import{context as s,SpanStatusCode as n,trace as a}from"@opentelemetry/api";import{HTTPException as o}from"hono/http-exception";import{envConfig as i}from"../../config/env-config.js";const u=t=>{const e=a?.getSpan(s.active());return t instanceof Error&&"name"in t&&t.name==="URIError"?(e&&(e.setStatus({code:n.OK}),e.end()),new Response("Malformed URL",{status:400})):t instanceof SyntaxError?(e&&(e.setStatus({code:n.OK}),e.end()),new Response("Invalid JSON",{status:400})):t instanceof o&&t.status<500?(e&&(e.setStatus({code:n.OK}),e.end()),t.getResponse()):(e&&(e.setStatus({code:n.ERROR,message:t.message}),e.recordException(t),e.end()),i.isDevelopMode&&t?.name==="PageMissingDefaultExportError"?new Response(t.message,{status:200}):new Response("Internal Server Error",{status:500}))};export{u as errorHandler};

package/dist/server/web-server/routes/feedback.d.ts

@@ -1,43 +0,0 @@
-import type { Context } from 'hono';
-import type { Store } from '../../store.js';
-import type { FEEDBACK_TYPES } from '../../../constants/common.js';
-type FeedbackData = {
-    path: string;
-    component: FEEDBACK_TYPES;
-    location?: string;
-    lang?: string;
-    agent?: string;
-    targetFeature?: string;
-    origin?: string;
-    metadata?: Record<string, any>;
-    score?: number | string;
-    reasons?: string[];
-    comment?: string;
-    max?: number;
-    email?: string;
-};
-export declare function normalizeFeedbackMetadata(metadata?: FeedbackData['metadata']): Record<string, any> | undefined;
-export declare function normalizeFeedbackData({ component, path, location, lang, agent, targetFeature, origin, score, max, reasons, comment, metadata, email, }: FeedbackData): {
-    feedbackComponent: string;
-    path: string | undefined;
-    location: string | undefined;
-    lang: string | undefined;
-    score: number | undefined;
-    maxScore: number | undefined;
-    reasons: string[] | undefined;
-    comment: string | undefined;
-    email: string | undefined;
-    agent: string | undefined;
-    targetFeature: string | undefined;
-    origin: string | undefined;
-    metadata: Record<string, any> | undefined;
-};
-export declare function feedbackHandler(store: Store): (ctx: Context) => Promise<(Response & import("hono").TypedResponse<any, 200, "json">) | (Response & import("hono").TypedResponse<{
-    errors: string[];
-}, 400, "json">) | (Response & import("hono").TypedResponse<{
-    errors: string[];
-}, 404, "json">) | (Response & import("hono").TypedResponse<{
-    errors: string[];
-}, 403, "json">) | (Response & import("hono").TypedResponse<never, 500, "json">)>;
-export {};
-//# sourceMappingURL=feedback.d.ts.map

package/dist/server/web-server/routes/feedback.js

@@ -1 +0,0 @@
-import{FEEDBACK_API_URL as T}from"../../constants/common.js";import{fetchWithClient as k}from"../../utils/fetch-with-client.js";import{MAX_AGENT_LENGTH as y,MAX_CONTEXT_LENGTH as A,MAX_EMAIL_LENGTH as N,MAX_LANG_LENGTH as C,MAX_PATH_LENGTH as L,MAX_REASONS_COUNT as F,MAX_TARGET_FEATURE_LENGTH as j}from"../../constants/feedback.js";import{mapObject as S}from"../../../utils/object/map-object.js";import{getFeedbackClientIp as R}from"../utils/feedback-ip.js";import{canAccessResource as G}from"../../utils/rbac.js";const E=["form","api","mcp"];function t(n,e){if(n!=null)return String(n).replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g,"").trim().slice(0,e)||void 0}function w(n){if(!n)return n;const e=["userAgent","firstName","lastName","auth_time","platform","id","email","ipAddress"];return S(n,(o,s)=>e.includes(s)?o:"*****")}function M({component:n,path:e,location:o,lang:s,agent:p,targetFeature:m,origin:f,score:r,max:i,reasons:c,comment:l,metadata:g,email:h}){const u=Array.isArray(c)?c.map(a=>t(String(a),A)).filter(a=>!!a).slice(0,F):void 0;return{feedbackComponent:n.toUpperCase(),path:t(e,L),location:t(o,A),lang:t(s,C),score:typeof r=="number"?r:void 0,maxScore:typeof i=="number"?i:void 0,reasons:u?.length?u:void 0,comment:t(l,A),email:t(h,N),agent:t(p,y),targetFeature:t(m,j),origin:f?.toUpperCase(),metadata:w(g)}}async function O(n,e){return(await k(T,{method:"POST",body:JSON.stringify(M(n)),headers:e})).json()}function z(n){return async e=>{const o=await e.req.json(),s=e.req.header("user-agent"),p=R(e.req.raw),m=e.req.header("Sec-Ch-Ua-Platform"),f={...o.metadata,userAgent:s,ipAddress:p,platform:m?m.replace(/"/g,""):"unknown"},r=[];(!o.path||o.path==="")&&r.push("`path` is required");const i=["sentiment","rating","comment","problem","mood","scale"];if(i.includes(o.component)||r.push(`\`component\` field should be one of ${i.join(", ")}.`),o.origin!==void 0&&!E.includes(String(o.origin).toLowerCase())&&r.push(`\`origin\` field should be one of ${E.join(", ")}.`),r.length)return e.json({errors:r},400);const{claims:c,isAuthenticated:l,teams:g}=e.get("auth"),h={isAuthenticated:l,email:c?.email,teams:g};if(Object.keys(n.config.access?.rbac||{}).length>0){const d=o.path,_=new URL(d).pathname,b=n.getRouteBySlug(_);if(!b)return e.json({errors:["Resource not found"]},404);if(!G(b,h,n.config.access?.rbac,n.config.access?.requiresLogin))return e.json({errors:["Forbidden: no permission to send feedback for resource"]},403)}const u={"Content-Type":"application/json"},a=c?.email||o?.email||f?.email;try{const d=await O({...o,email:a,metadata:{email:a,...f}},u);return e.json({message:"Thanks for your feedback",...d},200,{})}catch(d){return e.json({errors:["Failed to send feedback",d.message]},500)}}}export{z as feedbackHandler,M as normalizeFeedbackData,w as normalizeFeedbackMetadata};

package/dist/server/web-server/routes/health.d.ts

@@ -1,3 +0,0 @@
-import type { Handler } from 'hono';
-export declare const healthCheckHandler: Handler;
-//# sourceMappingURL=health.d.ts.map

package/dist/server/web-server/routes/health.js

@@ -1 +0,0 @@
-import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as n}from"../../constants/common.js";const r=async e=>e.newResponse(null,200,{"Cache-Control":n});export{r as healthCheckHandler};

package/dist/server/web-server/routes/helpers/get-current-rbac-teams.d.ts

@@ -1,3 +0,0 @@
-import type { Context } from 'hono';
-export declare function getCurrentRbacTeams(ctx: Context): string[];
-//# sourceMappingURL=get-current-rbac-teams.d.ts.map

package/dist/server/web-server/routes/helpers/get-current-rbac-teams.js

@@ -1 +0,0 @@
-function t(e){return e.get("apiKeyTeams")?.length?e.get("apiKeyTeams"):e.get("auth")?.teams||[]}export{t as getCurrentRbacTeams};

package/dist/server/web-server/routes/helpers/get-rbac-restrictions-data-for-catalog.d.ts

@@ -1,11 +0,0 @@
-import type { Context } from 'hono';
-import type { Store } from '../../../store.js';
-export declare function getRbacRestrictionsDataForCatalog({ store, ctx }: {
-    store: Store;
-    ctx: Context;
-}): {
-    currentRbacTeamsForRead: string[];
-    excludedTypes: string[];
-    excludedEntities: string[];
-};
-//# sourceMappingURL=get-rbac-restrictions-data-for-catalog.d.ts.map

package/dist/server/web-server/routes/helpers/get-rbac-restrictions-data-for-catalog.js

@@ -1 +0,0 @@
-import{getNotAccessibleCatalogResources as n}from"../../../plugins/catalog-entities/utils/get-not-accessible-catalog-resources.js";import{getCurrentRbacTeams as i}from"./get-current-rbac-teams.js";import{expandTeamsForRead as m}from"../../../utils/rbac.js";function b({store:o,ctx:r}){const e=o.getConfig().access?.rbac||{},t=i(r),c=m(e,t),{types:a,entities:s}=n({rbacConfig:e,currentRbacTeams:t});return{currentRbacTeamsForRead:c,excludedTypes:a,excludedEntities:s}}export{b as getRbacRestrictionsDataForCatalog};

package/dist/server/web-server/routes/helpers/process-redirects.d.ts

@@ -1,32 +0,0 @@
-import type { RedirectConfig } from '@redocly/config';
-import type { StatusCode } from 'hono/utils/http-status';
-/**
- *
- * Processes a redirect by normalizing the location and adding search parameters.
- * Does not handle wildcard redirects. Only direct redirects are supported.
- *
- * @param options - The options for the redirect.
- * @param options.redirect - The redirect configuration.
- * @param options.reqUrlSearch - The search parameters to add to the redirect location.
- * @returns The normalized redirect location and response code.
- *
- * @example
- * processRedirects({ redirect: { to: '/new-page' } });
- * // Returns: { location: '/new-page', type: 301 }
- *
- * @example
- * processRedirects({ redirect: { to: '/new-page' }, reqUrlSearch: '?param=value' });
- * // Returns: { location: '/new-page?param=value', type: 301 }
- *
- * @example
- * processRedirects({ redirect: { to: 'https://example.com', type: 302 } });
- * // Returns: { location: 'https://example.com', type: 302 }
- */
-export declare function processRedirects({ redirect, reqUrlSearch, }: {
-    redirect: WithRequired<RedirectConfig, 'to'>;
-    reqUrlSearch?: string;
-}): {
-    location: string;
-    type: StatusCode;
-};
-//# sourceMappingURL=process-redirects.d.ts.map

package/dist/server/web-server/routes/helpers/process-redirects.js

@@ -1 +0,0 @@
-import{removeTrailingSlash as n}from"../../../../utils/url/remove-trailing-slash.js";import{isLocalLink as r}from"../../../../utils/path/is-local-link.js";import{withPathPrefix as m}from"@redocly/theme/core/utils";function s({redirect:o,reqUrlSearch:t=""}){const i=r(o.to)?m(o.to):o.to;return{location:encodeURI(n(i)+t),type:o?.type||301}}export{s as processRedirects};

package/dist/server/web-server/routes/helpers/resolve-ui-locales-for-idp-login.d.ts

@@ -1,11 +0,0 @@
-export type IdpLoginL10n = {
-    defaultLocale: string;
-    locales: {
-        code: string;
-    }[];
-};
-export declare function resolveUiLocalesForIdpLogin(options: {
-    localePrefixParam: string | null;
-    l10n: IdpLoginL10n | undefined;
-}): string | undefined;
-//# sourceMappingURL=resolve-ui-locales-for-idp-login.d.ts.map

package/dist/server/web-server/routes/helpers/resolve-ui-locales-for-idp-login.js

@@ -1 +0,0 @@
-import{DEFAULT_LOCALE_PLACEHOLDER as i}from"../../../../constants/common.js";function c(o,n){if(!o?.trim()||!n?.length)return;const e=o.split("/").filter(Boolean)[0];return e?n.find(r=>r.code.toLowerCase()===e.toLowerCase())?.code:void 0}function l(o){const{localePrefixParam:n,l10n:e}=o,r=(e?c(n,e.locales):void 0)??e?.defaultLocale;return r===i?void 0:r}export{l as resolveUiLocalesForIdpLogin};

package/dist/server/web-server/routes/index.d.ts

@@ -1,16 +0,0 @@
-import type { Hono } from 'hono';
-import type { ReadStream } from 'fs';
-import type { Store } from '../../store';
-import type { PageStaticData } from '@redocly/config';
-import type { LlmsTxtGenerator, RouteDetails } from '../../types';
-export type RouteDataResolver = (route: RouteDetails) => Promise<PageStaticData>;
-export type StaticAssetReader = (assetPath: string) => Promise<ReadableStream | ReadStream>;
-export type RouteProviders = {
-    resolveRouteData: RouteDataResolver;
-    readStaticAsset: StaticAssetReader;
-    llmsTxtGenerator?: LlmsTxtGenerator;
-};
-export declare function installProdRoutes(router: Hono, store: Store, providers: RouteProviders): void;
-export declare function waitForPluginsLifecycle(store: Store): (_: any, next: any) => Promise<void>;
-export declare function installDevRoutes(router: Hono, store: Store): void;
-//# sourceMappingURL=index.d.ts.map

package/dist/server/web-server/routes/index.js

@@ -1 +0,0 @@
-import{serveStatic as c}from"hono/serve-static";import{withPathPrefix as i,withoutPathPrefix as H}from"@redocly/theme/core/utils";import{ServerRoutes as l}from"../../../constants/api.js";import{LLMS_TXT_FILE_NAME as L,PUBLIC_STATIC_FOLDER as C}from"../../constants/common.js";import{envConfig as I}from"../../config/env-config.js";import{authMiddleware as g}from"../middleware/authMiddleware.js";import{ensureSearchData as h}from"../middleware/ensureSearchData.js";import{dynamicMiddleware as D}from"../middleware/dynamic-middleware/dynamic-middleware.js";import{installRoutes as P}from"../../plugins/dev-onboarding/api/routes/index.js";import{installSkillsRoutes as N}from"./skills/skills-routes.js";import{llmsTxtHandler as M}from"./llms-txt.js";import{authorizeHandler as w,oidcCallbackHandler as B,logoutHandler as E,postLogoutHandler as v,idpLoginHandler as F,redoclyLoginCallbackHandler as G,samlCallbackHandler as U,redoclyTokenLoginHandler as Y,inviteHandler as y}from"./auth.js";import{appDataHandler as K}from"./app-data.js";import{searchFacetsHandler as k,searchHandler as x}from"./search.js";import{dynamicRouteHandler as b}from"./dynamic-route.js";import{pageDataHandler as V,sharedPageDataHandler as q}from"./page-data.js";import{pathPrefixRedirectHandler as X}from"./path-prefix-redirect.js";import{getRoutesByLineHandler as _,resolvePathHandler as S,resolvePathsHandler as $,resolveSlugHandler as f}from"./resolve-route.js";import{feedbackHandler as j}from"./feedback.js";import{loggerMiddleware as z}from"../middleware/loggerMiddleware.js";import{responseHeadersMiddleware as W}from"../middleware/responseHeadersMiddleware.js";import{idleTimeoutMiddleware as Z}from"../middleware/idleTimeoutMiddleware.js";import{otelTracesHandler as u}from"./otel/otel.js";import{healthCheckHandler as J}from"./health.js";import{askAiHandler as Q,aiAssistantEscalationsHandler as aa,aiAssistantFeedbackHandler as ea,AI_ASSISTANT_IDENTITY_STATUS_HEADER as ia}from"./ask-ai.js";import{semanticSearchHandler as la}from"./semantic-search.js";import{replayOauth2RedirectCallbackHandler as ta}from"./replay-oauth2-redirect.js";import{corsProxyHandler as r}from"./cors-proxy.js";import{corsMiddleware as m}from"../middleware/corsMiddleware.js";import{installApiRoutes as ma}from"./api-routes/api-routes.js";import{cookieMiddleware as oa}from"../middleware/cookieMiddleware.js";import{staticContentHandler as da}from"../routes/static-content.js";import{infoHandler as O}from"./info.js";import{catalogHandler as Aa}from"./catalog/catalog.js";import{catalogRelationsHandler as na}from"./catalog/catalog-relations.js";import{bffCatalogHandler as sa}from"./catalog/bff-catalog.js";import{bffCatalogRevisionsHandler as pa}from"./catalog/bff-catalog-revisions.js";import{bffCatalogRelatedEntitiesHandler as Ta}from"./catalog/bff-catalog-related-entities.js";import{catalogAuthMiddleware as o}from"../middleware/catalogAuthMiddleware.js";import{telemetryMiddleware as Ea}from"../middleware/telemetry-middleware.js";import{errorHandler as _a}from"./error.js";import{installMcpRoutes as Sa}from"./mcp-routes/mcp-routes.js";import{jsonValidatorMiddleware as n}from"../middleware/jsonValidatorMiddleware.js";import{otelTracesRequestSchema as fa}from"../../../api-schemas/otel-traces.js";import{searchFacetsRequestSchema as ra}from"../../../api-schemas/search-facets.js";import{searchRequestSchema as Oa}from"../../../api-schemas/search.js";function Te(a,e,d){const{resolveRouteData:s,readStaticAsset:p,llmsTxtGenerator:A}=d;a.use("*",Z()),a.use("*",oa()),a.use("*",D(e)),a.use("*",g(e)),a.use("*",z()),a.use("*",W(e)),a.use("*",Ea()),a.use(i("*"),c({root:`./${C}`,getContent:(t,R)=>da(t,R,e,p),rewriteRequestPath:t=>H(t)})),a.use(i(l.FEEDBACK),m({allowMethods:["POST"]})),a.use(i(l.ASK_AI),m({allowMethods:["POST"],exposeHeaders:[ia]})),a.use(i(l.AI_ASSISTANT_ESCALATIONS),m({allowMethods:["POST"]})),a.use(i(l.AI_ASSISTANT_FEEDBACK),m({allowMethods:["POST"]})),a.use(i(l.SEMANTIC_SEARCH),m({allowMethods:["POST"]})),a.use("*",Ra(e));const T=h(e);a.use(i(l.INFO),O()),I.NEW_CATALOG_ENABLED&&(a.use(i(l.CATALOG_ENTITIES),o({serverOutDir:e.serverOutDir}),Aa(e)),a.use(i(l.CATALOG_ENTITIES_RELATIONS),o({serverOutDir:e.serverOutDir}),na(e)),a.get(i(l.BFF_CATALOG_ENTITIES),o({serverOutDir:e.serverOutDir,protectReadMethods:!1}),sa(e)),a.get(i(l.BFF_CATALOG_RELATED_ENTITIES),o({serverOutDir:e.serverOutDir,protectReadMethods:!1}),Ta(e)),a.get(i(l.BFF_CATALOG_REVISIONS),o({serverOutDir:e.serverOutDir,protectReadMethods:!1}),pa(e))),a.get(i(l.SHARED_PAGE_DATA),q(e)),a.get(i(l.PAGE_DATA),V(e,s)),a.get(i(l.APP_DATA),K(e)),a.post(i(l.SEARCH),T,n(Oa),x(e)),a.post(i(l.SEARCH_FACETS),T,n(ra),k(e)),a.post(i(l.AUTHORIZATION),t=>w(t,e)),a.post(i(l.LOGOUT),E(e)),a.get(i(l.LOGOUT),E(e)),a.get(i(l.POST_LOGOUT),v(e)),a.get(i(l.OIDC_CALLBACK),B(e)),a.get(i(l.REDOCLY_TOKEN_LOGIN),Y(e)),a.get(i(l.REDOCLY_LOGIN_CALLBACK),G()),a.get(i(l.IDP_LOGIN),F(e)),a.post(i(l.SAML_CALLBACK),U(e)),a.get(i(l.INVITE),y(e)),a.get(i(l.HEALTH),J),Sa(a,e),P(a,e),N(a,e),a.all(i(l.CORS_PROXY),r(e)),a.all(i(`${l.CORS_PROXY}/*`),r(e)),ma(a,e),a.post(i(l.FEEDBACK),j(e)),a.post(i(l.RESOLVE_ROUTE_BY_PATH),S(e)),a.post(i(l.RESOLVE_ROUTES_BY_PATHS),$(e)),a.post(i(l.RESOLVE_ROUTE_BY_SLUG),f(e)),a.post(i(l.ASK_AI),Q(e)),a.post(i(l.AI_ASSISTANT_ESCALATIONS),aa(e)),a.post(i(l.AI_ASSISTANT_FEEDBACK),ea(e)),a.post(i(l.SEMANTIC_SEARCH),la(e)),a.get(i(l.GET_ROUTES_BY_LINE),_(e)),a.post(i(l.OTEL_TRACES),n(fa),u),a.get(i(l.REPLAY_OAUTH2_CALLBACK),ta),A&&a.get(i(`/${L}`),M(A)),a.all(i("/*"),b(e,s,p,A)),a.get("*",X),a.onError(_a)}function Ra(a){return async(e,d)=>{await a.waitForPluginsLifecycle(),await d()}}function Ee(a,e){a.get(i(l.INFO),O()),a.post(i(l.RESOLVE_ROUTE_BY_PATH),S(e)),a.post(i(l.RESOLVE_ROUTE_BY_SLUG),f(e)),a.get(i(l.GET_ROUTES_BY_LINE),_(e))}export{Ee as installDevRoutes,Te as installProdRoutes,Ra as waitForPluginsLifecycle};

package/dist/server/web-server/routes/info.d.ts

@@ -1,3 +0,0 @@
-import type { Handler } from 'hono';
-export declare function infoHandler(): Handler;
-//# sourceMappingURL=info.d.ts.map

package/dist/server/web-server/routes/info.js

@@ -1 +0,0 @@
-import{envConfig as r}from"../../config/env-config.js";function e(){return async n=>n.json({version:r.REDOCLY_PORTAL_VERSION},200)}export{e as infoHandler};

package/dist/server/web-server/routes/llms-txt.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { LlmsTxtGenerator } from '../../types';
-export declare function llmsTxtHandler(llmsTxtGenerator: LlmsTxtGenerator): Handler;
-//# sourceMappingURL=llms-txt.d.ts.map

package/dist/server/web-server/routes/llms-txt.js

@@ -1 +0,0 @@
-import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as r,LLMS_TXT_FILE_NAME as i}from"../../constants/common.js";import{MIME_TYPES as l}from"../mime-types.js";import{getContentTypeHeaderValue as a}from"../utils/content-type.js";function E(n){return async(t,o)=>{const e=await n.getLlmsTxt();return e===void 0?o():t.newResponse(e,200,{"Content-Type":a(l[".txt"]),"Access-Control-Allow-Origin":"*","Cache-Control":r,...t.req.query("download")!=null&&{"Content-Disposition":`attachment; filename="${i}"`}})}}export{E as llmsTxtHandler};

package/dist/server/web-server/routes/mcp-routes/a2a.d.ts

@@ -1,10 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../../store.js';
-/**
- * The agent card advertises `/a2a` as its endpoint, but we do not implement the A2A
- * protocol. An agent that POSTs here (e.g. `message/send`) gets 405 plus a `Link` header
- * enumerating the discovery resources we do support, so it can pivot to the MCP server
- * or the skills index.
- */
-export declare function a2aHandler(store: Store): Handler;
-//# sourceMappingURL=a2a.d.ts.map

package/dist/server/web-server/routes/mcp-routes/a2a.js

@@ -1 +0,0 @@
-import{withPathPrefix as i}from"@redocly/theme/core/utils";import{MCP_SERVER_CARD_SLUG as a}from"../../../../constants/common.js";import{telemetryTraceStep as l}from"../../../telemetry/helpers/trace-step.js";import{SKILLS_INDEX_SLUG as n}from"../skills/constants.js";function f(s){return async o=>await l("com.redocly.a2a.requested",async e=>{const r=s.config.skills?.hide!==!0,t=[`<${i(a)}>; rel="mcp-server-card"`];return r&&t.push(`<${i(n)}>; rel="agent-skills"`),e?.setAttribute("skillsAdvertised",r),e?.setAttribute("object","a2a"),e?.setAttribute("id","a2aId"),e?.setAttribute("uri","urn:redocly:realm:api:a2a:a2aId"),o.json({error:{code:"405",message:"Method not allowed"}},405,{Link:t.join(", ")})})}export{f as a2aHandler};

package/dist/server/web-server/routes/mcp-routes/agent-card.d.ts

@@ -1,4 +0,0 @@
-import type { Handler } from 'hono';
-import type { Store } from '../../../store.js';
-export declare function agentCardHandler(store: Store): Handler;
-//# sourceMappingURL=agent-card.d.ts.map

package/dist/server/web-server/routes/mcp-routes/agent-card.js

@@ -1 +0,0 @@
-import{CACHE_CONTROL_NO_STORE_HEADER_VALUE as c}from"../../../constants/common.js";import{telemetryTraceStep as d}from"../../../telemetry/helpers/trace-step.js";import{getAccessibleSkills as g}from"../../../utils/skills/get-accessible-skills.js";import{resolvePublicBaseUrl as m}from"../../../web-server/utils/resolve-public-base-url.js";import{shouldHandleMcpAuth as A}from"../../../utils/rbac/should-handle-mcp-auth.js";import{buildAgentCard as C}from"./utils/build-agent-card.js";function y(e){return async r=>await d("com.redocly.agentCard.served",async t=>{if(t?.setAttribute("id","agentCardId"),t?.setAttribute("object","agentCard"),t?.setAttribute("uri","urn:redocly:realm:api:agentCard:agentCardId"),e.config.skills?.hide===!0)return r.newResponse(null,404);const{isAuthenticated:l,teams:a,claims:{email:u}}=r.get("auth"),i=e.config.access?.rbac||{},n=!!e.config.access?.requiresLogin,s=g(e.getSkills(),{isAuthenticated:l,teams:a,email:u},i,n),o=A(n,i);return t?.setAttribute("skillsCount",s.length),t?.setAttribute("mcpAuthRequired",o),r.json(C({seo:e.getGlobalConfig("seo"),baseUrl:m(e,r),skills:s,mcpAuthRequired:o}),200,{"Cache-Control":c,"Access-Control-Allow-Origin":"*"})})}export{y as agentCardHandler};

package/dist/server/web-server/routes/mcp-routes/constants.d.ts

@@ -1,14 +0,0 @@
-export declare const MCP_EXTENSION_URI = "https://modelcontextprotocol.io";
-export declare const MCP_ENDPOINT_PATH: string;
-export declare const MCP_AUTH_SCHEMES: string[];
-export declare const A2A_PROTOCOL_VERSION = "0.3.0";
-export declare const A2A_PREFERRED_TRANSPORT = "HTTP+JSON";
-export declare const A2A_DEFAULT_INPUT_MODES: string[];
-export declare const A2A_DEFAULT_OUTPUT_MODES: string[];
-export declare const A2A_CAPABILITIES: {
-    streaming: boolean;
-    pushNotifications: boolean;
-};
-export declare const A2A_DEFAULT_DESCRIPTION = "Documentation agent card announcing this site's agent skills and MCP server.";
-export declare const AGENT_CARD_VERSION = "0.0.1";
-//# sourceMappingURL=constants.d.ts.map

package/dist/server/web-server/routes/mcp-routes/constants.js

@@ -1 +0,0 @@
-import{RESERVED_ROUTES as t}from"../../../plugins/get-reserved-routes.js";const e="https://modelcontextprotocol.io",n=t.mcp,s=["bearer","oauth2"],A="0.3.0",E="HTTP+JSON",_=["text/plain"],r=["text/plain"],T={streaming:!1,pushNotifications:!1},c="Documentation agent card announcing this site's agent skills and MCP server.",p="0.0.1";export{T as A2A_CAPABILITIES,c as A2A_DEFAULT_DESCRIPTION,_ as A2A_DEFAULT_INPUT_MODES,r as A2A_DEFAULT_OUTPUT_MODES,E as A2A_PREFERRED_TRANSPORT,A as A2A_PROTOCOL_VERSION,p as AGENT_CARD_VERSION,s as MCP_AUTH_SCHEMES,n as MCP_ENDPOINT_PATH,e as MCP_EXTENSION_URI};

package/dist/server/web-server/routes/mcp-routes/mcp-client-metadata.d.ts

@@ -1,14 +0,0 @@
-export type ClientMetadataDocument = {
-    redirect_uris: string[];
-    client_name?: string;
-    grant_types?: string[];
-    response_types?: string[];
-    scope?: string;
-    token_endpoint_auth_method?: string;
-};
-export declare function isRedirectUriRegistered(redirectUri: string, registeredUris: string[], options?: {
-    ignorePort?: boolean;
-}): boolean;
-export declare function isClientMetadataDocumentUrl(clientId: string | null | undefined): clientId is string;
-export declare function fetchClientMetadataDocument(clientId: string): Promise<ClientMetadataDocument>;
-//# sourceMappingURL=mcp-client-metadata.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-client-metadata.js

@@ -1 +0,0 @@
-import l from"@redocly/ajv";import{readStreamWithSizeLimit as p}from"../../../api-routes/helpers/read-stream-with-size-limit.js";import{ResponseSizeLimitError as m}from"../../../api-routes/errors/response-size-limit.js";const d=new l({allErrors:!0,strictSchema:!1,strictTypes:!1}),u={type:"object",properties:{redirect_uris:{type:"array",items:{type:"string",minLength:1},minItems:1},client_name:{type:"string",nullable:!0},grant_types:{type:"array",items:{type:"string"},nullable:!0},response_types:{type:"array",items:{type:"string"},nullable:!0},scope:{type:"string",nullable:!0},token_endpoint_auth_method:{type:"string",nullable:!0}},required:["redirect_uris"],additionalProperties:!0},i=d.compile(u),f=5e3,s=.0625;function S(e,t,r){if(!r?.ignorePort)return t.includes(e);const n=c(e);return n?t.some(o=>{const a=c(o);return!!a&&a.protocol===n.protocol&&a.hostname===n.hostname&&a.pathname===n.pathname}):!1}function c(e){try{return new URL(e)}catch{return null}}function h(e){if(!e)return!1;let t;try{t=new URL(e)}catch{return!1}return t.protocol==="https:"}async function _(e){if(!h(e))throw new Error("client_id must be an https URL");const t=await fetch(e,{method:"GET",redirect:"error",headers:{Accept:"application/json"},signal:AbortSignal.timeout(f)});if(!t.ok)throw new Error(`Failed to fetch client metadata: HTTP ${t.status}`);const r=t.headers.get("content-type")||"";if(!/^application\/(.+\+)?json/i.test(r))throw new Error(`Unexpected content-type for client metadata: ${r}`);if(!t.body)throw new Error("Client metadata response has no body");const n=await p({stream:t.body,maxSizeMB:s,onSizeExceededErrorHandler:()=>{throw new m(`Client metadata exceeds maximum size of ${s*1024} KB`)}});let o;try{o=JSON.parse(n.toString("utf-8"))}catch(a){throw new Error(`Invalid JSON in client metadata: ${a.message}`)}return y(o)}function y(e){if(!i(e)){const t=i.errors?.[0],r=t?`${t.instancePath||"/"} ${t.message}`.trim():"Validation failed";throw new Error(`Invalid client metadata: ${r}`)}return e}export{_ as fetchClientMetadataDocument,h as isClientMetadataDocumentUrl,S as isRedirectUriRegistered};

package/dist/server/web-server/routes/mcp-routes/mcp-consent-page.d.ts

@@ -1,24 +0,0 @@
-import type { PageSite } from '../../../plugins/mcp/handlers/credentials-page/types.js';
-/** How long the signed consent value on the page stays valid. */
-export declare const MCP_CONSENT_TTL_SEC: number;
-export declare const CONSENT_PAGE_HEADERS: {
-    'Content-Type': string;
-    'Cache-Control': string;
-    'X-Frame-Options': string;
-    'Referrer-Policy': string;
-    'Content-Security-Policy': string;
-};
-export type ConsentPageProps = {
-    site: PageSite;
-    user: string | undefined;
-    clientName: string | undefined;
-    clientIdHost: string | undefined;
-    redirectUrl: URL;
-    scopes: readonly string[];
-    accessLifetimeHours: number;
-    rememberDays: number | undefined;
-    consentToken: string;
-};
-export declare function consentPage({ site, user, clientName, clientIdHost, redirectUrl, scopes, accessLifetimeHours, rememberDays, consentToken, }: ConsentPageProps): string;
-export declare function consentInvalidPage(site: PageSite): string;
-//# sourceMappingURL=mcp-consent-page.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-consent-page.js

@@ -1,35 +0,0 @@
-import{ICONS as d,code as E,escapeHtml as a,htmlDocument as p,siteHeader as N}from"../../../plugins/mcp/handlers/credentials-page/layout.js";import{statusPage as L}from"../../../plugins/mcp/handlers/credentials-page/outcome-pages.js";const $=300,e={TITLE:"Allow MCP access",INTRO:"An MCP client asks to use this portal with your account.",WARNING:"Allow access only if you started this connection in your MCP client.",REDIRECT_LABEL:"Sends access to",REDIRECT_HINT:"The app receives access at this address.",USER_LABEL:"Signed in as",NOT_PROVIDED:"Not provided",CLIENT_LABEL:"App",CLIENT_UNKNOWN:"The app did not send a name. Continue only if you just started a connection yourself.",CLIENT_NAME_HINT:"The app chose this name itself. We do not check it.",CLIENT_ID_HOST:s=>`App details loaded from ${E(s)}`,PANEL_TITLE:"What the client gets",ACCOUNT_DETAILS:"Your account details, including your name and email address",ACT_AS_YOU:"Use of the MCP server of this portal as you",ACCESS_LIFETIME:s=>`Access that it can renew for up to ${s} hours`,REMEMBER:s=>`If you allow access, we do not ask again for this client for ${s} days.`,SCOPES_LABEL:"Scopes:",ALLOW:"Allow access",DENY:"Deny",INVALID_TITLE:"This request is no longer valid",INVALID_BODY:s=>`An access request works for ${s} minutes. This one has expired or can no longer be used.`,INVALID_NEXT:"Go back to your MCP client and start the connection again."},f={"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","X-Frame-Options":"DENY","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; frame-ancestors 'none'; base-uri 'none'"};function _({protocol:s,host:n,pathname:t,search:o}){return`${s}${n?`//${n}`:""}${t}${o}`}function r(s,n,t){return`<section aria-labelledby="${s}">
-<h2 id="${s}">${a(n)}</h2>
-${t.filter(Boolean).join(`
-`)}
-</section>`}function m(s,n){return r("consent-client",e.CLIENT_LABEL,[s?`<p>${a(s)}</p><p class="muted small">${e.CLIENT_NAME_HINT}</p>`:`<p>${e.CLIENT_UNKNOWN}</p>`,n?`<p class="muted small">${e.CLIENT_ID_HOST(n)}</p>`:""])}function A({scopes:s,accessLifetimeHours:n,rememberDays:t}){const o=`${d.shield}${e.PANEL_TITLE}`,i=`<ol class="steps">
-<li>${e.ACCOUNT_DETAILS}</li>
-<li>${e.ACT_AS_YOU}</li>
-<li>${e.ACCESS_LIFETIME(n)}</li>
-</ol>`,c=t?`<p>${e.REMEMBER(t)}</p>`:"";return`<aside class="panel" aria-labelledby="panel-title">
-<div class="panel-steps"><h2 id="panel-title">${o}</h2>${i}</div>
-<details class="panel-steps-toggle"><summary><h2>${o}</h2></summary>${i}</details>
-<div class="link-facts">
-${c}
-<div class="tags"><span>${e.SCOPES_LABEL}</span>${s.map(l=>`<span class="tag">${a(l)}</span>`).join("")}</div>
-</div>
-</aside>`}function S({site:s,user:n,clientName:t,clientIdHost:o,redirectUrl:i,scopes:c,accessLifetimeHours:l,rememberDays:T,consentToken:u}){const I=`<div class="page">
-<main class="card">
-${N(s)}
-<h1>${e.TITLE}</h1>
-<p class="lede">${e.INTRO}</p>
-<div class="banner warning" role="note">${d.warning}<p>${e.WARNING}</p></div>
-<div class="info-card">
-${m(t,o)}
-${r("consent-user",e.USER_LABEL,[`<p>${a(n||e.NOT_PROVIDED)}</p>`])}
-${r("consent-redirect",e.REDIRECT_LABEL,[`<p>${E(_(i))}</p>`,`<p class="muted small">${e.REDIRECT_HINT}</p>`])}
-</div>
-<form class="credentials" method="post" autocomplete="off">
-<input type="hidden" name="consent" value="${a(u)}">
-<div class="actions">
-<div class="actions-row"><button class="secondary" type="submit" name="decision" value="deny">${e.DENY}</button><button class="primary" type="submit" name="decision" value="allow">${e.ALLOW}</button></div>
-</div>
-</form>
-</main>
-${A({scopes:c,accessLifetimeHours:l,rememberDays:T})}
-</div>`;return p({title:e.TITLE,body:I},s.colorScheme)}function y(s){return p(L("warning",e.INVALID_TITLE,[e.INVALID_BODY($/60),e.INVALID_NEXT]),s.colorScheme)}export{f as CONSENT_PAGE_HEADERS,$ as MCP_CONSENT_TTL_SEC,y as consentInvalidPage,S as consentPage};

package/dist/server/web-server/routes/mcp-routes/mcp-oauth-store.d.ts

@@ -1,15 +0,0 @@
-import type { KvService } from '@redocly/config';
-export declare const MCP_CONSENT_MEMORY_DAYS = 30;
-export type ConsentGrant = {
-    idpId: string | undefined;
-    subject: string;
-    clientId: string;
-    redirectUri: string;
-};
-export declare function hasConsent(kv: KvService, grant: ConsentGrant): Promise<boolean>;
-export declare function saveConsent(kv: KvService, grant: ConsentGrant): Promise<void>;
-/** Returns false when the code was already redeemed. */
-export declare function redeemAuthorizationCode(kv: KvService, code: string, expiresAtSec: number): Promise<boolean>;
-/** Returns false when the refresh token was already redeemed. */
-export declare function redeemRefreshToken(kv: KvService, refreshToken: string, expiresAtSec: number): Promise<boolean>;
-//# sourceMappingURL=mcp-oauth-store.d.ts.map

package/dist/server/web-server/routes/mcp-routes/mcp-oauth-store.js

@@ -1 +0,0 @@
-import{createHash as i}from"node:crypto";const u=30;function r(e){return i("sha256").update(e).digest("hex")}function s({idpId:e,subject:t,clientId:n,redirectUri:o}){return["mcp","consent",r(JSON.stringify([e??null,t])),r(JSON.stringify([n,o]))]}async function f(e,t){return await e.get(s(t))!==null}async function m(e,t){await e.set(s(t),{approvedAt:Date.now()},{ttlInSeconds:u*24*60*60})}function p(e,t,n){return c(e,["mcp","redeemed-code",r(t)],n)}function h(e,t,n){return c(e,["mcp","redeemed-refresh-token",r(t)],n)}async function c(e,t,n){const o=Math.max(n-Math.floor(Date.now()/1e3),1);return e.transaction(async a=>await a.get(t)?!1:(await a.set(t,{redeemedAt:Date.now()},{ttlInSeconds:o}),!0))}export{u as MCP_CONSENT_MEMORY_DAYS,f as hasConsent,p as redeemAuthorizationCode,h as redeemRefreshToken,m as saveConsent};