@redocly/redoc-reef 0.140.0-next.7 → 0.140.0-next.9

package/dist/server/utils/rbac.js

@@ -1 +1 @@
-import R from"path";import T from"picomatch";import"../node-crypto-polyfill.js";import{REDOCLY_TEAMS_RBAC as L,REDOCLY_ROUTE_RBAC as A}from"@redocly/config";import{MCP_ROUTE as U,PUBLIC_MCP_ROUTE as k}from"@redocly/theme/core/constants/mcp";import{ServerRoutes as w}from"../../constants/api.js";import{DEFAULT_ANONYMOUS_VISITOR_TEAM as D,PUBLIC_RBAC_SCOPE_ITEM as y,RBAC_ALL_OTHER_TEAMS as l,DEFAULT_RBAC_SCOPE as x,GRAPHQL_SPEC_SLUG as B}from"../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as g,PUBLIC_API_DEFINITIONS_FOLDER as C,PUBLIC_ASSETS_FOLDER as b,RUNTIME_RESOURCES_DIR as $,SCORECARD_CLASSIC_FOLDER as W,SITEMAP_FILE_NAME as v,LLMS_TXT_FILE_NAME as Y}from"../constants/common.js";import{MCP_CREDENTIALS_ROUTE as G}from"../constants/mcp.js";import{ANONYMOUS_AUTH_DETAILS as H}from"../constants/rbac.js";import{removeTrailingSlash as P}from"../../utils/url/remove-trailing-slash.js";import{removeLeadingSlash as z}from"../../utils/url/remove-leading-slash.js";import{parsePathVersions as K}from"../../utils/path/parse-path-versions.js";import{reporter as V}from"../tools/notifiers/reporter.js";import{bold as J}from"../tools/notifiers/helpers/colors.js";import{shaDirPathShort as Q}from"../utils/crypto/sha-dir-path-short.js";import{isTruthy as X}from"../../utils/guards/is-truthy.js";import{isPathInFolder as I}from"../../utils/path/is-path-in-folder.js";import{canExpandConfig as Z,expandRbacConfig as q,getTeamFolderDefaults as tt,parseTeamFoldersTemplate as et,parseTeamNameTemplate as rt}from"./rbac-expand.js";import{getUserParamsFromCookies as nt}from"../web-server/auth.js";import{getDeeperGlobPattern as ot}from"./globs.js";import{EntitlementsProvider as st}from"../entitlements/entitlements-provider.js";const j=["NONE","READ","TRIAGE","WRITE","MAINTAIN","ADMIN"],ct=new Set(["x-parsed-md-description","x-parsed-md-summary"]),it=new Set(Object.values(w).map(t=>P(t.split(":")[0])));function wt(t,e){const r=j.indexOf(t.toUpperCase()),n=j.indexOf(e.toUpperCase());return r>n?t:e}const _={};function F(t,e){if(!t?.content)return y;const r=t.content,{slug:n,fsPath:o}=e;if(!n&&!o)return y;const s=a=>{const d=`slug:${a}`,p=_[d]??T(a);_[d]=p;const E=`fsPath:${a}`,S=_[E]??T(z(a));return _[E]=S,!!(n&&p(n))||!!(o&&S(o))};if(ut(n||o||"")&&Object.keys(r).filter(p=>s(p)).length===0)return r[x]||y;const f=Object.keys(r).filter(a=>s(a));if(f.length==0)return y;const u=f.map(a=>T.scan(a,{tokens:!0,parts:!0}));let h=u[0];for(let a=1;a<u.length;a++)h=ot(h,u[a]);return r[h.input]}function N(t,e,r){const n=r?[...e,r]:e,o=[];for(const s of n)t[s]?o.push(t[s]):t[l]&&s!==r&&o.push(t[l]);return o.some(s=>s.toLowerCase()!=="none")}function Bt(t,e,r={},n=!1){if(n&&Object.keys(r).length===0)return e.isAuthenticated;const o=r.features?.[t];return o?N(o,e.teams):!0}function bt(t,e){return O(t,H,e.access?.rbac||{},e.access?.requiresLogin||!1)}function O(t,e={},r={},n=!1){if(t.slug&&typeof t.slug=="string"&&it.has(P(t.slug))||(t.slug===U||t.slug===k||t.slug===G)&&st.instance().canAccessFeature("mcp"))return!0;if(n&&Object.keys(r).length===0)return!!e.isAuthenticated;const o=q(r,e.teams||[]),s=t[L]||F(o,t[A]||{});return Object.keys(s||{}).length===0?!1:Object.keys(s).length===1&&s[l]&&s[l].toLowerCase()!=="none"?!0:N(s,e?.teams||[],e?.email)}function $t(t,e,r,n){if(!t.startsWith(C)&&!t.startsWith(g))return!0;const o=t.replace(new RegExp(`^${C}/`),"").replace(new RegExp(`^${g}/`),"").replace(new RegExp(`^${B}/`),""),c=o==="."?"":o,i={[A]:{slug:t,fsPath:c},slug:t};return O(i,n,e,r)}function Wt(t,e,r,n,o){if(!I(t,b))return[`/${v}`,`/${Y}`].includes(t)||[$,W].some(E=>I(t,E));const s=t.match(/\..{64}\.([A-Fa-f0-9]{8})\.[^.]+$/)?.[1];if(!s)return!0;const c=n[s];if(!c)return!0;const{base:i,ext:f}=R.parse(t),u=i.split(".")[0],h=f.split(".").join(""),d=c==="."?"":c,p={[A]:{slug:t,fsPath:R.posix.join(d,`${u}.${h}`)},slug:t};return O(p,o,e,r)}async function vt(t,e){const{isAuthenticated:r=!1,idpAccessToken:n,federatedAccessToken:o,federatedIdToken:s,...c}=await nt(t,e),{teams:i=[]}=c;let f;return r?f=i.filter(u=>u!==D):f=[D],{isAuthenticated:r,idpAccessToken:n,teams:f,claims:c}}function M(t,e,r={},n=!1){if(!t)return t;if(Array.isArray(t)){const o=[];for(const s of t){const c=M(s,e,r,n);c!==void 0&&o.push(c)}return o}if(typeof t=="object"){if(!O(t,e,r,n))return;let o=!1;const s={};for(const c in t){if(c===L||c===A)continue;if(ct.has(c)){s[c]=t[c];continue}const i=M(t[c],e,r,n);if(!t.link&&(c==="items"||c==="menu"&&t.type==="tab")&&Array.isArray(i)&&i.length===0&&t[c].length!==0){o=!0;continue}i!==void 0&&(s[c]=i),c==="paths"&&at(i)&&ft(i)}return o?void 0:s}return t}function Yt(t){return typeof t=="string"?t.split(" ").filter(Boolean):Array.isArray(t)?t.map(e=>e.toString()):[]}function Gt(t,e){if(!e)return;const r=e.content;if(!r)return e;const n=Object.entries(r).flatMap(([s,c])=>s===x?[[s,c]]:[[s,c]].concat(t.localeFolders.map(i=>[s.startsWith("/")?`/${i.toLocaleLowerCase()}${s}`:R.posix.join(t.localizationFolder,i,s),c]))),o=Object.fromEntries(n);return{...e,content:o}}async function Ht(t,e){if(!e)return{};const r={},n=new Set(t.scan().flatMap(({relativePath:o})=>{const{versionFolderPath:s}=K(o)||{},c=R.dirname(o);return s?[s,c]:c}));for(const o of n)r[Q(o)]=o;return r}const m=t=>typeof t=="object"&&t!==null&&!Array.isArray(t);function at(t){return m(t)&&Object.keys(t).length>0}function ft(t){for(const e of Object.keys(t)){const r=t[e];m(r)&&Object.keys(r).length===0&&delete t[e]}}function ut(t){return t?t.split("/").filter(Boolean).some(r=>r.startsWith(".")):!1}const lt=t=>{if(t&&m(t)&&("content"in t&&m(t.content)||"reunite"in t&&m(t.reunite)||"features"in t&&m(t.features)||t.teamFolders&&t.teamNamePatterns)){const e=Object.values(t.content||{});if(e.length===0)return!0;if(e.every(m))return e.every(r=>Object.values(r).every(n=>typeof n=="string"))}return!1},zt=async t=>{if(t){if(Object.keys(t).length===0)return{};if(lt(t))return mt(t);await V.panicOnContentError(`You are using an incorrect format of ${J("rbac:")} configuration. See: https://redocly.com/docs/realm/access`)}},mt=t=>{const e={...t};if(e.content){const r={};for(const n in e.content)if(e.content[n]!==void 0){const o=P(n);r[o]=e.content[n]}e.content=r}return e};function Kt(t,e){const r=t.fsPath,n=t.slug,o=[],s=Z(e)&&(r||n)?et(e,[r,n].filter(X)):null;if(s){const i=e?.teamNamePatterns?.map(f=>f.replace("{teamPathSegment}",s.teamPathSegment).replace("{projectRole}","read"))??[];o.push(...i)}const c=F(s?{content:{...tt(e),...e.content}}:e,t);return o.push(...pt(c)),ht(e,o)}function pt(t){if(!t)return[];const e=[],r=l in t?{authenticated:t[l],anonymous:t[l]}:{};for(const[n,o]of Object.entries({...r,...t}))o.toLowerCase()!=="none"&&n!==l&&e.push(n);return e}function ht(t,e){return e.map(n=>rt(t,n)??{teamName:n}).map(n=>n.projectRole&&n.projectRole!=="READ"?n.teamName?.toLowerCase().replace(n.projectRole?.toLowerCase?.()??"","read")??"":n.teamName?.toLowerCase()??"")}export{j as PROJECT_ROLES_ORDERED_BY_ACCESS_LEVEL,Gt as applyL10nToRbacConfig,Wt as canAccessAsset,Bt as canAccessFeature,O as canAccessResource,$t as canDownloadApiDefinition,ht as expandTeamsForRead,pt as extractTeamsFromScopeItems,M as filterDataByAccessDeep,vt as getAuthDetailsFromCookies,wt as getHigherRole,Kt as getRbacTeamsListForResource,F as getScopeItemsForResource,N as hasScopeAccess,lt as isRbacConfigValid,bt as isResourcePubliclyAccessible,mt as normalizeRbacConfig,zt as parseRbacConfig,Yt as parseTeamClaimToArray,Ht as resolveDirectoryHashes};
+import y from"path";import O from"picomatch";import"../node-crypto-polyfill.js";import{REDOCLY_TEAMS_RBAC as T,REDOCLY_ROUTE_RBAC as R}from"@redocly/config";import{MCP_ROUTE as U,PUBLIC_MCP_ROUTE as k}from"@redocly/theme/core/constants/mcp";import{ServerRoutes as w}from"../../constants/api.js";import{DEFAULT_ANONYMOUS_VISITOR_TEAM as D,PUBLIC_RBAC_SCOPE_ITEM as _,RBAC_ALL_OTHER_TEAMS as l,DEFAULT_RBAC_SCOPE as x,GRAPHQL_SPEC_SLUG as B}from"../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as g,PUBLIC_API_DEFINITIONS_FOLDER as I,PUBLIC_ASSETS_FOLDER as b,RUNTIME_RESOURCES_DIR as $,SCORECARD_CLASSIC_FOLDER as W,SITEMAP_FILE_NAME as v,LLMS_TXT_FILE_NAME as Y}from"../constants/common.js";import{MCP_CREDENTIALS_ROUTE as G}from"../constants/mcp.js";import{ANONYMOUS_AUTH_DETAILS as H}from"../constants/rbac.js";import{removeTrailingSlash as S}from"../../utils/url/remove-trailing-slash.js";import{removeLeadingSlash as z}from"../../utils/url/remove-leading-slash.js";import{parsePathVersions as K}from"../../utils/path/parse-path-versions.js";import{reporter as V}from"../tools/notifiers/reporter.js";import{bold as J}from"../tools/notifiers/helpers/colors.js";import{shaDirPathShort as Q}from"../utils/crypto/sha-dir-path-short.js";import{isTruthy as X}from"../../utils/guards/is-truthy.js";import{isPathInFolder as C}from"../../utils/path/is-path-in-folder.js";import{canExpandConfig as Z,expandRbacConfig as q,getTeamFolderDefaults as tt,parseTeamFoldersTemplate as et,parseTeamNameTemplate as rt}from"./rbac-expand.js";import{getUserParamsFromCookies as nt}from"../web-server/auth.js";import{getDeeperGlobPattern as ot}from"./globs.js";import{EntitlementsProvider as st}from"../entitlements/entitlements-provider.js";const j=["NONE","READ","TRIAGE","WRITE","MAINTAIN","ADMIN"],ct=new Set(["x-parsed-md-description","x-parsed-md-summary"]),at=new Set(Object.values(w).map(t=>S(t.split(":")[0])));function wt(t,e){const r=j.indexOf(t.toUpperCase()),n=j.indexOf(e.toUpperCase());return r>n?t:e}const P={};function F(t,e){if(!t?.content)return _;const r=t.content,{slug:n,fsPath:o}=e;if(!n&&!o)return _;const s=f=>{const E=`slug:${f}`,p=P[E]??O(f);P[E]=p;const A=`fsPath:${f}`,L=P[A]??O(z(f));return P[A]=L,!!(n&&p(n))||!!(o&&L(o))};if(ut(n||o||"")&&Object.keys(r).filter(p=>s(p)).length===0)return r[x]||_;const i=Object.keys(r).filter(f=>s(f));if(i.length==0)return _;const u=i.map(f=>O.scan(f,{tokens:!0,parts:!0}));let h=u[0];for(let f=1;f<u.length;f++)h=ot(h,u[f]);return r[h.input]}function N(t,e,r){const n=r?[...e,r]:e,o=[];for(const s of n)t[s]?o.push(t[s]):t[l]&&s!==r&&o.push(t[l]);return o.some(s=>s.toLowerCase()!=="none")}function Bt(t,e,r={},n=!1){if(n&&Object.keys(r).length===0)return e.isAuthenticated;const o=r.features?.[t];return o?N(o,e.teams):!0}function bt(t,e){return d(t,H,e.access?.rbac||{},e.access?.requiresLogin||!1)}function d(t,e={},r={},n=!1){if(t.slug&&typeof t.slug=="string"&&at.has(S(t.slug))||(t.slug===U||t.slug===k||t.slug===G)&&st.instance().canAccessFeature("mcp"))return!0;if(n&&Object.keys(r).length===0)return!!e.isAuthenticated;const o=q(r,e.teams||[]),s=t[T]||F(o,t[R]||{});return Object.keys(s||{}).length===0?!1:Object.keys(s).length===1&&s[l]&&s[l].toLowerCase()!=="none"?!0:N(s,e?.teams||[],e?.email)}function $t(t,e,r,n,o){if(!t.startsWith(I)&&!t.startsWith(g))return!0;if(o){const u={[T]:o.rbac,[R]:{slug:o.slug,fsPath:o.sourcePath}};return d(u,n,e,r)}const s=t.replace(new RegExp(`^${I}/`),"").replace(new RegExp(`^${g}/`),"").replace(new RegExp(`^${B}/`),""),a=s==="."?"":s,i={[R]:{slug:t,fsPath:a},slug:t};return d(i,n,e,r)}function Wt(t,e,r,n,o){if(!C(t,b))return[`/${v}`,`/${Y}`].includes(t)||[$,W].some(A=>C(t,A));const s=t.match(/\..{64}\.([A-Fa-f0-9]{8})\.[^.]+$/)?.[1];if(!s)return!0;const c=n[s];if(!c)return!0;const{base:a,ext:i}=y.parse(t),u=a.split(".")[0],h=i.split(".").join(""),E=c==="."?"":c,p={[R]:{slug:t,fsPath:y.posix.join(E,`${u}.${h}`)},slug:t};return d(p,o,e,r)}async function vt(t,e){const{isAuthenticated:r=!1,idpAccessToken:n,federatedAccessToken:o,federatedIdToken:s,...c}=await nt(t,e),{teams:a=[]}=c;let i;return r?i=a.filter(u=>u!==D):i=[D],{isAuthenticated:r,idpAccessToken:n,teams:i,claims:c}}function M(t,e,r={},n=!1){if(!t)return t;if(Array.isArray(t)){const o=[];for(const s of t){const c=M(s,e,r,n);c!==void 0&&o.push(c)}return o}if(typeof t=="object"){if(!d(t,e,r,n))return;let o=!1;const s={};for(const c in t){if(c===T||c===R)continue;if(ct.has(c)){s[c]=t[c];continue}const a=M(t[c],e,r,n);if(!t.link&&(c==="items"||c==="menu"&&t.type==="tab")&&Array.isArray(a)&&a.length===0&&t[c].length!==0){o=!0;continue}a!==void 0&&(s[c]=a),c==="paths"&&it(a)&&ft(a)}return o?void 0:s}return t}function Yt(t){return typeof t=="string"?t.split(" ").filter(Boolean):Array.isArray(t)?t.map(e=>e.toString()):[]}function Gt(t,e){if(!e)return;const r=e.content;if(!r)return e;const n=Object.entries(r).flatMap(([s,c])=>s===x?[[s,c]]:[[s,c]].concat(t.localeFolders.map(a=>[s.startsWith("/")?`/${a.toLocaleLowerCase()}${s}`:y.posix.join(t.localizationFolder,a,s),c]))),o=Object.fromEntries(n);return{...e,content:o}}async function Ht(t,e){if(!e)return{};const r={},n=new Set(t.scan().flatMap(({relativePath:o})=>{const{versionFolderPath:s}=K(o)||{},c=y.dirname(o);return s?[s,c]:c}));for(const o of n)r[Q(o)]=o;return r}const m=t=>typeof t=="object"&&t!==null&&!Array.isArray(t);function it(t){return m(t)&&Object.keys(t).length>0}function ft(t){for(const e of Object.keys(t)){const r=t[e];m(r)&&Object.keys(r).length===0&&delete t[e]}}function ut(t){return t?t.split("/").filter(Boolean).some(r=>r.startsWith(".")):!1}const lt=t=>{if(t&&m(t)&&("content"in t&&m(t.content)||"platform"in t&&m(t.platform)||"features"in t&&m(t.features)||t.teamFolders&&t.teamNamePatterns)){const e=Object.values(t.content||{});if(e.length===0)return!0;if(e.every(m))return e.every(r=>Object.values(r).every(n=>typeof n=="string"))}return!1},zt=async t=>{if(t){if(Object.keys(t).length===0)return{};if(lt(t))return mt(t);await V.panicOnContentError(`You are using an incorrect format of ${J("rbac:")} configuration. See: https://redocly.com/docs/realm/access`)}},mt=t=>{const e={...t};if(e.content){const r={};for(const n in e.content)if(e.content[n]!==void 0){const o=S(n);r[o]=e.content[n]}e.content=r}return e};function Kt(t,e){const r=t.fsPath,n=t.slug,o=[],s=Z(e)&&(r||n)?et(e,[r,n].filter(X)):null;if(s){const a=e?.teamNamePatterns?.map(i=>i.replace("{teamPathSegment}",s.teamPathSegment).replace("{projectRole}","read"))??[];o.push(...a)}const c=F(s?{content:{...tt(e),...e.content}}:e,t);return o.push(...pt(c)),ht(e,o)}function pt(t){if(!t)return[];const e=[],r=l in t?{authenticated:t[l],anonymous:t[l]}:{};for(const[n,o]of Object.entries({...r,...t}))o.toLowerCase()!=="none"&&n!==l&&e.push(n);return e}function ht(t,e){return e.map(n=>rt(t,n)??{teamName:n}).map(n=>n.projectRole&&n.projectRole!=="READ"?n.teamName?.toLowerCase().replace(n.projectRole?.toLowerCase?.()??"","read")??"":n.teamName?.toLowerCase()??"")}export{j as PROJECT_ROLES_ORDERED_BY_ACCESS_LEVEL,Gt as applyL10nToRbacConfig,Wt as canAccessAsset,Bt as canAccessFeature,d as canAccessResource,$t as canDownloadApiDefinition,ht as expandTeamsForRead,pt as extractTeamsFromScopeItems,M as filterDataByAccessDeep,vt as getAuthDetailsFromCookies,wt as getHigherRole,Kt as getRbacTeamsListForResource,F as getScopeItemsForResource,N as hasScopeAccess,lt as isRbacConfigValid,bt as isResourcePubliclyAccessible,mt as normalizeRbacConfig,zt as parseRbacConfig,Yt as parseTeamClaimToArray,Ht as resolveDirectoryHashes};

package/dist/server/utils/report-all-errors.js

@@ -1 +1 @@
-import{envConfig as p}from"../config/env-config.js";import{logger as l}from"../tools/notifiers/logger.js";import{reporter as r}from"../tools/notifiers/reporter.js";import{isMarkdocError as d}from"../plugins/markdown/errors.js";import{telemetryTraceStep as g}from"../../cli/telemetry/helpers/trace-step.js";import{writeProblemsReport as u}from"./write-problems-report.js";async function M(e){await g("com.redocly.build.validationErrors",async o=>{let t=0;for(const[c,f]of e.cache.errors.entries()){const m=c.split(":")[1];for(const i of f)d(i)?(r.reportMarkdocProblem(i),i.type!=="BROKEN_LINK"&&t++):await r.panicOnBuild(i.message,m)}const a=await e.getConfig();if(!p.isBuildMode)return;const n=r.getPageRenderProblems().length;o?.setAttribute("markdocErrors",t.toString()),o?.setAttribute("pageRenderErrors",n.toString()),t>0&&!a?.reunite?.ignoreMarkdocErrors?await s(`Need to fix ${t} Markdoc issue(s) or set the \`ignoreMarkdocErrors\` option to \`true\` in the \`reunite\` section of your \`redocly.yaml\``):n>0&&await s(`Need to fix ${n} runtime error(s) in React pages`)})}async function s(e){r.printErrors();try{u()}catch(o){l.warn("Failed to write the problems report: "+o.message)}await r.panic(e)}export{M as reportAllErrors};
+import{envConfig as p}from"../config/env-config.js";import{logger as l}from"../tools/notifiers/logger.js";import{reporter as r}from"../tools/notifiers/reporter.js";import{isMarkdocError as d}from"../plugins/markdown/errors.js";import{telemetryTraceStep as g}from"../../cli/telemetry/helpers/trace-step.js";import{writeProblemsReport as u}from"./write-problems-report.js";async function M(o){await g("com.redocly.build.validationErrors",async e=>{let t=0;for(const[c,f]of o.cache.errors.entries()){const m=c.split(":")[1];for(const i of f)d(i)?(r.reportMarkdocProblem(i),i.type!=="BROKEN_LINK"&&t++):await r.panicOnBuild(i.message,m)}const n=await o.getConfig();if(!p.isBuildMode)return;const s=r.getPageRenderProblems().length;e?.setAttribute("markdocErrors",t.toString()),e?.setAttribute("pageRenderErrors",s.toString()),t>0&&!n?.platform?.ignoreMarkdocErrors?await a(`Need to fix ${t} Markdoc issue(s) or set the \`ignoreMarkdocErrors\` option to \`true\` in the \`platform\` section of your \`redocly.yaml\``):s>0&&await a(`Need to fix ${s} runtime error(s) in React pages`)})}async function a(o){r.printErrors();try{u()}catch(e){l.warn("Failed to write the problems report: "+e.message)}await r.panic(o)}export{M as reportAllErrors};

package/dist/server/web-server/middleware/jsonValidatorMiddleware.d.ts

@@ -12,594 +12,5 @@ export declare function jsonValidatorMiddleware<T extends ZodSchema>(schema: T):
     out: {
         json: T extends import("zod/v3").ZodType<any, import("zod/v3").ZodTypeDef, any> ? import("zod/v3").output<T> : T extends import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>> ? import("zod").infer<T> : never;
     };
-}, (Response & import("hono").TypedResponse<"Bad Request", 400, "text">) | (Response & import("hono").TypedResponse<{
-    success: boolean;
-    error: ({
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "custom";
-        readonly params?: Record<string, any> | undefined;
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_element";
-        readonly origin: "map" | "set";
-        readonly key: import("hono/utils/types").JSONValue;
-        readonly issues: ({
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "custom";
-            readonly params?: Record<string, any> | undefined;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | /*elided*/ any | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_key";
-            readonly origin: "map" | "record";
-            readonly issues: ({
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "custom";
-                readonly params?: Record<string, any> | undefined;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | /*elided*/ any | /*elided*/ any | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_format";
-                readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-                readonly pattern?: string;
-                readonly input?: string;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_type";
-                readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_value";
-                readonly values: (string | number | boolean | null)[];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "not_multiple_of";
-                readonly divisor: number;
-                readonly input?: number | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_big";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly maximum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_small";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly minimum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "unrecognized_keys";
-                readonly keys: string[];
-                readonly input?: {
-                    [x: string]: import("hono/utils/types").JSONValue;
-                } | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_union";
-                readonly errors: [];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-                readonly discriminator?: string | undefined;
-                readonly inclusive: false;
-                readonly matches: number[];
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_union";
-                readonly errors: ({
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "custom";
-                    readonly params?: Record<string, any> | undefined;
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                } | /*elided*/ any | /*elided*/ any | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "invalid_format";
-                    readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-                    readonly pattern?: string;
-                    readonly input?: string;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "invalid_type";
-                    readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "invalid_value";
-                    readonly values: (string | number | boolean | null)[];
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "not_multiple_of";
-                    readonly divisor: number;
-                    readonly input?: number | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "too_big";
-                    readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                    readonly maximum: number;
-                    readonly inclusive?: boolean;
-                    readonly exact?: boolean;
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "too_small";
-                    readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                    readonly minimum: number;
-                    readonly inclusive?: boolean;
-                    readonly exact?: boolean;
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "unrecognized_keys";
-                    readonly keys: string[];
-                    readonly input?: {
-                        [x: string]: import("hono/utils/types").JSONValue;
-                    } | undefined;
-                } | {
-                    readonly path: (string | number | null)[];
-                    readonly message: string;
-                    readonly code: "invalid_union";
-                    readonly errors: [];
-                    readonly input?: import("hono/utils/types").JSONValue | undefined;
-                    readonly discriminator?: string | undefined;
-                    readonly inclusive: false;
-                    readonly matches: number[];
-                } | /*elided*/ any)[][];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-                readonly discriminator?: string | undefined;
-                readonly options?: (string | number | boolean | null)[] | undefined;
-                readonly inclusive?: true;
-            })[];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_format";
-            readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-            readonly pattern?: string;
-            readonly input?: string;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_type";
-            readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_value";
-            readonly values: (string | number | boolean | null)[];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "not_multiple_of";
-            readonly divisor: number;
-            readonly input?: number | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_big";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly maximum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_small";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly minimum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "unrecognized_keys";
-            readonly keys: string[];
-            readonly input?: {
-                [x: string]: import("hono/utils/types").JSONValue;
-            } | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_union";
-            readonly errors: [];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-            readonly discriminator?: string | undefined;
-            readonly inclusive: false;
-            readonly matches: number[];
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_union";
-            readonly errors: ({
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "custom";
-                readonly params?: Record<string, any> | undefined;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | any | any | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_format";
-                readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-                readonly pattern?: string;
-                readonly input?: string;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_type";
-                readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_value";
-                readonly values: (string | number | boolean | null)[];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "not_multiple_of";
-                readonly divisor: number;
-                readonly input?: number | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_big";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly maximum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_small";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly minimum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "unrecognized_keys";
-                readonly keys: string[];
-                readonly input?: {
-                    [x: string]: import("hono/utils/types").JSONValue;
-                } | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_union";
-                readonly errors: [];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-                readonly discriminator?: string | undefined;
-                readonly inclusive: false;
-                readonly matches: number[];
-            } | any)[][];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-            readonly discriminator?: string | undefined;
-            readonly options?: (string | number | boolean | null)[] | undefined;
-            readonly inclusive?: true;
-        })[];
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_key";
-        readonly origin: "map" | "record";
-        readonly issues: ({
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "custom";
-            readonly params?: Record<string, any> | undefined;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | any | any | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_format";
-            readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-            readonly pattern?: string;
-            readonly input?: string;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_type";
-            readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_value";
-            readonly values: (string | number | boolean | null)[];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "not_multiple_of";
-            readonly divisor: number;
-            readonly input?: number | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_big";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly maximum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_small";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly minimum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "unrecognized_keys";
-            readonly keys: string[];
-            readonly input?: {
-                [x: string]: import("hono/utils/types").JSONValue;
-            } | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_union";
-            readonly errors: [];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-            readonly discriminator?: string | undefined;
-            readonly inclusive: false;
-            readonly matches: number[];
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_union";
-            readonly errors: ({
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "custom";
-                readonly params?: Record<string, any> | undefined;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | any | any | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_format";
-                readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-                readonly pattern?: string;
-                readonly input?: string;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_type";
-                readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_value";
-                readonly values: (string | number | boolean | null)[];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "not_multiple_of";
-                readonly divisor: number;
-                readonly input?: number | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_big";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly maximum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "too_small";
-                readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-                readonly minimum: number;
-                readonly inclusive?: boolean;
-                readonly exact?: boolean;
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "unrecognized_keys";
-                readonly keys: string[];
-                readonly input?: {
-                    [x: string]: import("hono/utils/types").JSONValue;
-                } | undefined;
-            } | {
-                readonly path: (string | number | null)[];
-                readonly message: string;
-                readonly code: "invalid_union";
-                readonly errors: [];
-                readonly input?: import("hono/utils/types").JSONValue | undefined;
-                readonly discriminator?: string | undefined;
-                readonly inclusive: false;
-                readonly matches: number[];
-            } | any)[][];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-            readonly discriminator?: string | undefined;
-            readonly options?: (string | number | boolean | null)[] | undefined;
-            readonly inclusive?: true;
-        })[];
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_format";
-        readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-        readonly pattern?: string;
-        readonly input?: string;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_type";
-        readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_value";
-        readonly values: (string | number | boolean | null)[];
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "not_multiple_of";
-        readonly divisor: number;
-        readonly input?: number | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "too_big";
-        readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-        readonly maximum: number;
-        readonly inclusive?: boolean;
-        readonly exact?: boolean;
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "too_small";
-        readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-        readonly minimum: number;
-        readonly inclusive?: boolean;
-        readonly exact?: boolean;
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "unrecognized_keys";
-        readonly keys: string[];
-        readonly input?: {
-            [x: string]: import("hono/utils/types").JSONValue;
-        } | undefined;
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_union";
-        readonly errors: [];
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-        readonly discriminator?: string | undefined;
-        readonly inclusive: false;
-        readonly matches: number[];
-    } | {
-        readonly path: (string | number | null)[];
-        readonly message: string;
-        readonly code: "invalid_union";
-        readonly errors: ({
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "custom";
-            readonly params?: Record<string, any> | undefined;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | any | any | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_format";
-            readonly format: import("zod/v4/core").$ZodStringFormats | (string & {});
-            readonly pattern?: string;
-            readonly input?: string;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_type";
-            readonly expected: import("zod/v4/core").$ZodInvalidTypeExpected;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_value";
-            readonly values: (string | number | boolean | null)[];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "not_multiple_of";
-            readonly divisor: number;
-            readonly input?: number | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_big";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly maximum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "too_small";
-            readonly origin: "number" | "int" | "bigint" | "date" | "string" | "array" | "set" | "file" | (string & {});
-            readonly minimum: number;
-            readonly inclusive?: boolean;
-            readonly exact?: boolean;
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "unrecognized_keys";
-            readonly keys: string[];
-            readonly input?: {
-                [x: string]: import("hono/utils/types").JSONValue;
-            } | undefined;
-        } | {
-            readonly path: (string | number | null)[];
-            readonly message: string;
-            readonly code: "invalid_union";
-            readonly errors: [];
-            readonly input?: import("hono/utils/types").JSONValue | undefined;
-            readonly discriminator?: string | undefined;
-            readonly inclusive: false;
-            readonly matches: number[];
-        } | any)[][];
-        readonly input?: import("hono/utils/types").JSONValue | undefined;
-        readonly discriminator?: string | undefined;
-        readonly options?: (string | number | boolean | null)[] | undefined;
-        readonly inclusive?: true;
-    })[];
-}, 400, "json">)>;
+}, Response>;
 //# sourceMappingURL=jsonValidatorMiddleware.d.ts.map

package/dist/server/web-server/utils/ssrf-safe-lookup.d.ts

@@ -1,7 +1,8 @@
 import { type LookupFunction } from 'node:net';
 /**
  * Returns a drop-in replacement for `dns.lookup` that errors with
- * {@link SsrfBlockedError} if any resolved address is in the blocklist.
+ * {@link SsrfBlockedError} if any resolved address is in the blocklist. The error message names
+ * the hostname only, never a resolved address, so callers may show it to the client.
  *
  * Install on an http/https agent (`connect.lookup` for undici, or `lookup` for a node:https Agent)
  * so that every socket connection — including those made while following redirects — is re-validated