@redocly/revel-reef 0.128.0-next.4 → 0.128.0-next.5

package/dist/server/utils/crypto/random-string.js

@@ -0,0 +1 @@
+import{randomBytes as t}from"crypto";function n(r){return t(r).toString("base64").slice(0,r)}export{n as randomString};

package/dist/server/utils/crypto/random-uuid.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generates a cryptographically secure random UUID (version 4).
+ *
+ * @returns {string} A UUID v4 string, e.g. `"550e8400-e29b-41d4-a716-446655440000"`.
+ *
+ * @example
+ * const id = randomUUID();
+ * console.log(id); // "ddeb27fb-d9a0-4624-be4d-4615062daed4"
+ *
+ */
+export declare function randomUUID(): `${string}-${string}-${string}-${string}-${string}`;
+//# sourceMappingURL=random-uuid.d.ts.map

package/dist/server/utils/crypto/random-uuid.js

@@ -0,0 +1 @@
+function r(){return crypto.randomUUID()}export{r as randomUUID};

package/dist/server/utils/crypto/sha-dir-path-short.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generates a short, deterministic hash for a directory path.
+ *
+ * @param {string} dirRelativePath - The relative path to the directory.
+ * @returns {string} An 8-character hexadecimal hash representing the normalized path.
+ *
+ * @example
+ * shaDirPathShort('src/utils'); // "a3c9b712"
+ *
+ */
+export declare function shaDirPathShort(dirRelativePath: string): string;
+//# sourceMappingURL=sha-dir-path-short.d.ts.map

package/dist/server/utils/crypto/sha-dir-path-short.js

@@ -0,0 +1 @@
+import{normalizePathPrefix as t}from"@redocly/theme/core/utils";import{shaHexShort as h}from"./sha-hex-short.js";function n(r){const o=r==="."?"/":t(r);return h(o)}export{n as shaDirPathShort};

package/dist/server/utils/crypto/sha-file-base64.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Computes the SHA-256 hash of a file’s contents and returns it as a Base64 string.
+ *
+ * @param {string} fileName - Path to the file whose contents will be hashed.
+ * @returns {string} The Base64-encoded SHA-256 hash of the file contents.
+ *
+ * @example
+ * shaFile('data.txt'); // e.g. "X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE="
+ */
+export declare function shaFileBase64(fileName: string): string;
+//# sourceMappingURL=sha-file-base64.d.ts.map

package/dist/server/utils/crypto/sha-file-base64.js

@@ -0,0 +1 @@
+import{createHash as r}from"crypto";import{readFileSync as a}from"node:fs";function o(e){return r("sha256").update(a(e)).digest("base64")}export{o as shaFileBase64};

package/dist/server/utils/crypto/sha-file-hex.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Computes the SHA-256 hash of a file’s contents and returns it as a hexadecimal string.
+ *
+ * @param {string} fileName - Path to the file whose contents will be hashed.
+ * @returns {string} The SHA-256 hash of the file contents, encoded as a hex string.
+ *
+ * @example
+ * shaFileForUrl('data.txt'); // "a591a6d40bf420404a011733cfb7b190..."
+ *
+ */
+export declare function shaFileHex(fileName: string): string;
+//# sourceMappingURL=sha-file-hex.d.ts.map

package/dist/server/utils/crypto/sha-file-hex.js

@@ -0,0 +1 @@
+import{createHash as r}from"crypto";import{readFileSync as t}from"fs";function o(e){return r("sha256").update(t(e)).digest("hex")}export{o as shaFileHex};

package/dist/server/utils/crypto/sha-hex-short.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generates a short SHA-256 hash from the given string content.
+ *
+ * @param {string} content - The input string to hash.
+ * @returns {string} The first 8 hexadecimal characters of the SHA-256 hash.
+ *
+ * @example
+ * shaHexShort("hello"); // "2cf24dba"
+ */
+export declare function shaHexShort(content: string): string;
+//# sourceMappingURL=sha-hex-short.d.ts.map

package/dist/server/utils/crypto/sha-hex-short.js

@@ -0,0 +1 @@
+import{createHash as e}from"crypto";function s(t){return e("sha256").update(t).digest("hex").substring(0,8)}export{s as shaHexShort};

package/dist/server/utils/crypto/sha-hex.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generates a SHA-256 hash of a given string and returns it as a hexadecimal string.
+ *
+ * Unlike `sha()` which returns Base64, this function outputs a lowercase hexadecimal digest.
+ * It’s suitable for checksums, integrity validation, or deterministic cache keys.
+ *
+ * Uses SHA-256 — a cryptographically secure algorithm.
+ *
+ * @param content - The input string to hash.
+ * @returns The SHA-256 hash as a hexadecimal string.
+ *
+ * @example
+ * shaHex('hello');
+ * // returns '2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7901e9c6629e7a4bce9a3'
+ */
+export declare function shaHex(content: string): string;
+//# sourceMappingURL=sha-hex.d.ts.map

package/dist/server/utils/crypto/sha-hex.js

@@ -0,0 +1 @@
+import{createHash as t}from"crypto";function a(e){return t("sha256").update(e).digest("hex")}export{a as shaHex};

package/dist/server/utils/crypto/sha.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generates a SHA-256 hash of a given string or Buffer and returns it as a Base64-encoded string.
+ *
+ * Useful for generating secure checksums, file fingerprints, or deterministic cache keys.
+ *
+ * SHA-256 is cryptographically strong and preferred for integrity and security checks.
+ *
+ * @param content - The input content (string or Buffer) to hash.
+ * @returns The Base64-encoded SHA-256 hash string.
+ *
+ * @example
+ * sha('hello'); // returns 'LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ='
+ *
+ * @example
+ * sha(Buffer.from('hello')); // also returns the same value
+ */
+export declare function sha(content: string | Buffer): string;
+//# sourceMappingURL=sha.d.ts.map

package/dist/server/utils/crypto/sha.js

@@ -0,0 +1 @@
+import{createHash as t}from"crypto";function r(e){return t("sha256").update(e).digest("base64")}export{r as sha};

package/dist/server/utils/crypto/sha1.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Generates a SHA-1 hash of a given string or Buffer and returns it as a Base64-encoded string.
+ *
+ * Useful for checksum validation, content fingerprinting, or creating short deterministic identifiers.
+ *
+ * SHA-1 is considered **cryptographically weak** and should not be used for security-sensitive
+ * operations (like password hashing or digital signatures). For those, prefer SHA-256.
+ *
+ * @param content - The input content (string or Buffer) to hash.
+ * @returns The Base64-encoded SHA-1 hash string.
+ *
+ * @example
+ * sha1('hello'); // returns 'qvTGHdzF6KLavt4PO0gs2a6pQ00='
+ *
+ * @example
+ * sha1(Buffer.from('hello')); // also returns 'qvTGHdzF6KLavt4PO0gs2a6pQ00='
+ */
+export declare function sha1(content: string | Buffer): string;
+//# sourceMappingURL=sha1.d.ts.map

package/dist/server/utils/crypto/sha1.js

@@ -0,0 +1 @@
+import{createHash as t}from"crypto";function r(e){return t("sha1").update(e).digest("base64")}export{r as sha1};

package/dist/server/utils/fs.js

@@ -1 +1 @@
-import{existsSync as c,readdirSync as m,lstatSync as u,mkdirSync as f,copyFileSync as p,lstat as F}from"fs";import{join as s,extname as S,basename as x,dirname as h,resolve as E}from"path";import{withPathPrefix as w}from"@redocly/theme/core/utils";import{PUBLIC_ASSETS_FOLDER as a}from"../constants/common.js";import{reporter as P}from"../tools/notifiers/reporter.js";import{logger as D}from"../tools/notifiers/logger.js";import{shaDirPathShort as b,shaFileForUrl as N}from"./crypto.js";import{slug as $}from"./slugger.js";function _(r){if(!c(r))return[];const e=[];return o(r),e;function o(t){try{m(t).forEach(n=>{let i=s(t,n);u(i).isDirectory()?o(i):e.push(i)})}catch(n){D.error(`Error reading all file names in ${t}: `+n.message)}}}async function I(r,e,o){const t=E(r,e);if(!c(t))throw new v(`File not found at ${t}`,e);c(s(o,a))||f(s(o,a),{recursive:!0});const n=S(t),i=[$(x(t,n)),N(t),b(h(e))].join(".").concat(n),l=s(o,a,i),y=s(a,i);try{if(p(t,l),!c(l))throw new Error(`Cannot copy file ${e}`);return w(y)}catch(d){await P.panicOnBuild(d.message)}}function g(r,e){let o=[];if(c(r)){if(c(e)||f(e,{recursive:!0}),!u(r).isDirectory())throw new Error(`Source path must be a directory, but ${r} provided`);o=m(r),o.forEach(t=>{const n=s(r,t);if(u(n).isDirectory())g(n,s(e,t));else{const i=s(e,t);p(n,i)}})}}function T(r){return f(h(r),{recursive:!0}),r}async function q(r){return new Promise(e=>{F(r,(o,t)=>{e(o==null&&t.isFile())})})}class v extends Error{filePath;constructor(e,o){super(e),this.name="FileNotFoundError",this.filePath=o}}export{v as FileNotFoundError,g as copyFolderRecursiveSync,I as copyStaticFile,T as ensureDir,q as fileExistsAsync,_ as readFileNames};
+import{existsSync as c,readdirSync as l,lstatSync as f,mkdirSync as u,copyFileSync as p,lstat as x}from"fs";import{join as s,extname as S,basename as F,dirname as h,resolve as E}from"path";import{withPathPrefix as w}from"@redocly/theme/core/utils";import{PUBLIC_ASSETS_FOLDER as a}from"../constants/common.js";import{reporter as P}from"../tools/notifiers/reporter.js";import{logger as D}from"../tools/notifiers/logger.js";import{shaDirPathShort as b}from"../utils/crypto/sha-dir-path-short.js";import{shaFileHex as N}from"../utils/crypto/sha-file-hex.js";import{slug as $}from"./slugger.js";function I(r){if(!c(r))return[];const e=[];return o(r),e;function o(t){try{l(t).forEach(n=>{let i=s(t,n);f(i).isDirectory()?o(i):e.push(i)})}catch(n){D.error(`Error reading all file names in ${t}: `+n.message)}}}async function T(r,e,o){const t=E(r,e);if(!c(t))throw new v(`File not found at ${t}`,e);c(s(o,a))||u(s(o,a),{recursive:!0});const n=S(t),i=[$(F(t,n)),N(t),b(h(e))].join(".").concat(n),m=s(o,a,i),y=s(a,i);try{if(p(t,m),!c(m))throw new Error(`Cannot copy file ${e}`);return w(y)}catch(d){await P.panicOnBuild(d.message)}}function g(r,e){let o=[];if(c(r)){if(c(e)||u(e,{recursive:!0}),!f(r).isDirectory())throw new Error(`Source path must be a directory, but ${r} provided`);o=l(r),o.forEach(t=>{const n=s(r,t);if(f(n).isDirectory())g(n,s(e,t));else{const i=s(e,t);p(n,i)}})}}function U(r){return u(h(r),{recursive:!0}),r}async function q(r){return new Promise(e=>{x(r,(o,t)=>{e(o==null&&t.isFile())})})}class v extends Error{filePath;constructor(e,o){super(e),this.name="FileNotFoundError",this.filePath=o}}export{v as FileNotFoundError,g as copyFolderRecursiveSync,T as copyStaticFile,U as ensureDir,q as fileExistsAsync,I as readFileNames};

package/dist/server/utils/index.d.ts

@@ -1,5 +1,3 @@
-export * from './async.js';
-export * from './crypto.js';
 export * from './fs.js';
 export * from './paths.js';
 export * from './rbac.js';

package/dist/server/utils/index.js

@@ -1 +1 @@
-export*from"./async.js";export*from"./crypto.js";export*from"./fs.js";export*from"./paths.js";export*from"./rbac.js";export*from"./slugger.js";export*from"./attribute-parser.js";export*from"./resolve-src-set.js";export*from"./shared-data.js";export*from"./globs.js";export*from"./billing.js";export*from"./resolve-asset-path.js";export*from"./conflict-resolvers.js";
+export*from"./fs.js";export*from"./paths.js";export*from"./rbac.js";export*from"./slugger.js";export*from"./attribute-parser.js";export*from"./resolve-src-set.js";export*from"./shared-data.js";export*from"./globs.js";export*from"./billing.js";export*from"./resolve-asset-path.js";export*from"./conflict-resolvers.js";

package/dist/server/utils/rbac.js

@@ -1 +1 @@
-import A from"path";import O from"picomatch";import"../node-crypto-polyfill.js";import{REDOCLY_TEAMS_RBAC as D,REDOCLY_ROUTE_RBAC as R}from"@redocly/config";import{DEFAULT_ANONYMOUS_VISITOR_TEAM as P,ServerRoutes as I,PUBLIC_RBAC_SCOPE_ITEM as d,RBAC_ALL_OTHER_TEAMS as u,DEFAULT_RBAC_SCOPE as _}from"../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as g,PUBLIC_API_DEFINITIONS_FOLDER as L,PUBLIC_ASSETS_FOLDER as F}from"../constants/common.js";import{removeTrailingSlash as w}from"../../utils/url/remove-trailing-slash.js";import{parsePathVersions as N}from"../../utils/path/parse-path-versions.js";import{reporter as B}from"../tools/notifiers/reporter.js";import{bold as k}from"../tools/notifiers/helpers/colors.js";import{canExpandConfig as W,expandRbacConfig as U,getTeamFolderDefaults as b,parseTeamFoldersTemplate as M,parseTeamNameTemplate as $}from"./rbac-expand.js";import{getUserParamsFromCookies as v}from"../web-server/auth.js";import{shaDirPathShort as Y}from"./crypto.js";import{getDeeperGlobPattern as z}from"./globs.js";import{EntitlementsProvider as H}from"../entitlements/entitlements-provider.js";const S=["NONE","READ","TRIAGE","WRITE","MAINTAIN","ADMIN"],G=new Set(["x-parsed-md-description","x-parsed-md-summary"]);function mt(t,e){const n=S.indexOf(t.toUpperCase()),r=S.indexOf(e.toUpperCase());return n>r?t:e}const j={};function y(t,e){if(!t||!e)return d;const n=t.content;if(!n)return d;const{slug:r,fsPath:s}=e[R]??{};if(!r&&!s)return d;const o=f=>{const m=j[f]||O(f);return j[f]=m,!!(r&&m(r))||!!(s&&m(s))};if(K(r||s||"")&&Object.keys(n).filter(T=>o(T)).length===0)return n[_]||d;const c=Object.keys(n).filter(f=>o(f));if(c.length==0)return d;const l=c.map(f=>O.scan(f,{tokens:!0,parts:!0}));let p=l[0];for(let f=1;f<l.length;f++)p=z(p,l[f]);return n[p.input]}function pt(t,e,n={},r=!1){if(r&&Object.keys(n).length===0)return e.isAuthenticated;const s=n.features?.[t];return s?e.teams.some(o=>s[o]&&s[o].toLowerCase()!=="none"):!0}function dt(t,e){return E(t,{isAuthenticated:!1,teams:[P]},e.rbac||{},e.requiresLogin||!1)}function E(t,e={},n={},r=!1){if(t.slug&&typeof t.slug=="string"&&Object.values(I).some(c=>{const l=c.split(":")[0].replace(/\/$/,"");return t.slug===l||t.slug?.startsWith(c)})||typeof t.slug=="string"&&t.slug?.endsWith("/mcp")&&H.instance().canAccessFeature("mcp"))return!0;if(r&&Object.keys(n).length===0)return!!e.isAuthenticated;const s=U(n,e.teams||[]),o=t[D]||y(s,t);if(Object.keys(o||{}).length===0)return!1;if(Object.keys(o).length===1&&o[u]&&o[u].toLowerCase()!=="none")return!0;const a=(e?.email?[...e?.teams||[],e?.email]:e?.teams)||[],i=[];for(const c of a??[])o[c]?i.push(o[c]):o[u]&&c!==e?.email&&i.push(o[u]);return i.length?i.some(c=>c.toLowerCase()!=="none"):!1}function ht(t,e,n,r){if(!t.startsWith(L)&&!t.startsWith(g))return!0;const s=t.replace(new RegExp(`^${L}/`),"").replace(new RegExp(`^${g}/`),""),a=s==="."?"":s,i={[R]:{slug:t,fsPath:a},slug:t};return E(i,r,e,n)}function At(t,e,n,r,s){if(!t.startsWith(F))return!0;const o=t.match(/.*\..{64}\.([A-Fa-f0-9]{8})\.[^\.]+$/)?.[1];if(!o)return!0;const a=r[o];if(!a)return!0;const{base:i,ext:c}=A.parse(t),l=i.split(".")[0],p=c.split(".").join(""),m=a==="."?"":a,T={[R]:{slug:t,fsPath:A.posix.join(m,`${l}.${p}`)},slug:t};return E(T,s,e,n)}async function Rt(t,e){const{isAuthenticated:n=!1,idpAccessToken:r,federatedAccessToken:s,federatedIdToken:o,...a}=await v(t,e),{teams:i=[]}=a;let c;return n?c=i.filter(l=>l!==P):c=[P],{isAuthenticated:n,idpAccessToken:r,teams:c,claims:a}}function C(t,e,n={},r=!1){if(!t)return t;if(Array.isArray(t)){const s=[];for(const o of t){const a=C(o,e,n,r);a!==void 0&&s.push(a)}return s}if(typeof t=="object"){if(!E(t,e,n,r))return;let s=!1;const o={};for(const a in t){if(a===D||a===R)continue;if(G.has(a)){o[a]=t[a];continue}const i=C(t[a],e,n,r);if(a==="items"&&Array.isArray(i)&&i.length===0&&t[a].length!==0){s=!0;continue}i!==void 0&&(o[a]=i)}return s?void 0:o}return t}function yt(t){return typeof t=="string"?t.split(" ").filter(Boolean):Array.isArray(t)?t.map(e=>e.toString()):[]}function Et(t,e){if(!e)return;const n=e.content;if(!n)return e;const r=Object.entries(n).flatMap(([o,a])=>o===_?[[o,a]]:[[o,a],...t.localeFolders.map(i=>[o.startsWith("/")?`/${i.toLocaleLowerCase()}${o}`:A.posix.join(t.localizationFolder,i,o),a])]),s=Object.fromEntries(r);return{...e,content:s}}async function Tt(t,e){if(!e)return{};const n={},r=new Set((await t.scan()).flatMap(({relativePath:s})=>{const{versionFolderPath:o}=N(s)||{},a=A.dirname(s);return o?[o,a]:a}));for(const s of r)n[Y(s)]=s;return n}const h=t=>typeof t=="object"&&t!==null&&!Array.isArray(t);function K(t){return t?t.split("/").filter(Boolean).some(n=>n.startsWith(".")):!1}const V=t=>{if(t&&h(t)&&("content"in t&&h(t.content)||"reunite"in t&&h(t.reunite)||"features"in t&&h(t.features)||t.teamFolders&&t.teamNamePatterns)){const e=Object.values(t.content||{});if(e.length===0)return!0;if(e.every(h))return e.every(n=>Object.values(n).every(r=>typeof r=="string"))}return!1},Pt=async t=>{if(t){if(Object.keys(t).length===0)return{};if(V(t))return J(t);await B.panicOnContentError(`You are using an incorrect format of ${k("rbac:")} configuration. See: https://redocly.com/docs/realm/access`)}},J=t=>{const e={...t};if(e.content){const n={};for(const r in e.content)if(e.content[r]!==void 0){const s=w(r);n[s]=e.content[r]}e.content=n}return e};function xt(t,e){const n=t.fsPath,r=t.slug,s=[];if(W(e)){const o=M(e,[n,r]);if(o){const a=e?.teamNamePatterns?.map(c=>c.replace("{teamPathSegment}",o.teamPathSegment).replace("{projectRole}","read"))??[];s.push(...a);const i=y({content:{...b(e),...e.content}},t);s.push(...x(i))}else{const a=y(e,t);s.push(...x(a))}}else{const o=y(e,t);s.push(...x(o))}return Q(e,s)}function x(t){if(!t)return[];const e=[],n=u in t?{authenticated:t[u],anonymous:t[u]}:{};for(const[r,s]of Object.entries({...n,...t}))s.toLowerCase()!=="none"&&r!==u&&e.push(r);return e}function Q(t,e){return e.map(r=>$(t,r)??{teamName:r}).map(r=>r.projectRole&&r.projectRole!=="READ"?r.teamName?.toLowerCase().replace(r.projectRole?.toLowerCase?.()??"","read")??"":r.teamName?.toLowerCase()??"")}export{S as PROJECT_ROLES_ORDERED_BY_ACCESS_LEVEL,Et as applyL10nToRbacConfig,At as canAccessAsset,pt as canAccessFeature,E as canAccessResource,ht as canDownloadApiDefinition,Q as expandTeamsForRead,x as extractTeamsForSearch,C as filterDataByAccessDeep,y as getAllowedTeamsForRoute,Rt as getAuthDetailsFromCookies,mt as getHigherRole,xt as getRbacTeamsForSearch,V as isRbacConfigValid,dt as isResourcePubliclyAccessible,J as normalizeRbacConfig,Pt as parseRbacConfig,yt as parseTeamClaimToArray,Tt as resolveDirectoryHashes};
+import A from"path";import O from"picomatch";import"../node-crypto-polyfill.js";import{REDOCLY_TEAMS_RBAC as D,REDOCLY_ROUTE_RBAC as R}from"@redocly/config";import{DEFAULT_ANONYMOUS_VISITOR_TEAM as P,ServerRoutes as I,PUBLIC_RBAC_SCOPE_ITEM as d,RBAC_ALL_OTHER_TEAMS as u,DEFAULT_RBAC_SCOPE as _}from"../../constants/common.js";import{DEPRECATED_PUBLIC_API_DEFINITIONS_FOLDER as g,PUBLIC_API_DEFINITIONS_FOLDER as L,PUBLIC_ASSETS_FOLDER as F}from"../constants/common.js";import{removeTrailingSlash as w}from"../../utils/url/remove-trailing-slash.js";import{parsePathVersions as N}from"../../utils/path/parse-path-versions.js";import{reporter as B}from"../tools/notifiers/reporter.js";import{bold as k}from"../tools/notifiers/helpers/colors.js";import{shaDirPathShort as W}from"../utils/crypto/sha-dir-path-short.js";import{canExpandConfig as U,expandRbacConfig as b,getTeamFolderDefaults as M,parseTeamFoldersTemplate as $,parseTeamNameTemplate as v}from"./rbac-expand.js";import{getUserParamsFromCookies as Y}from"../web-server/auth.js";import{getDeeperGlobPattern as z}from"./globs.js";import{EntitlementsProvider as H}from"../entitlements/entitlements-provider.js";const S=["NONE","READ","TRIAGE","WRITE","MAINTAIN","ADMIN"],G=new Set(["x-parsed-md-description","x-parsed-md-summary"]);function mt(t,e){const n=S.indexOf(t.toUpperCase()),r=S.indexOf(e.toUpperCase());return n>r?t:e}const j={};function y(t,e){if(!t||!e)return d;const n=t.content;if(!n)return d;const{slug:r,fsPath:s}=e[R]??{};if(!r&&!s)return d;const o=f=>{const m=j[f]||O(f);return j[f]=m,!!(r&&m(r))||!!(s&&m(s))};if(K(r||s||"")&&Object.keys(n).filter(T=>o(T)).length===0)return n[_]||d;const c=Object.keys(n).filter(f=>o(f));if(c.length==0)return d;const l=c.map(f=>O.scan(f,{tokens:!0,parts:!0}));let p=l[0];for(let f=1;f<l.length;f++)p=z(p,l[f]);return n[p.input]}function pt(t,e,n={},r=!1){if(r&&Object.keys(n).length===0)return e.isAuthenticated;const s=n.features?.[t];return s?e.teams.some(o=>s[o]&&s[o].toLowerCase()!=="none"):!0}function dt(t,e){return E(t,{isAuthenticated:!1,teams:[P]},e.rbac||{},e.requiresLogin||!1)}function E(t,e={},n={},r=!1){if(t.slug&&typeof t.slug=="string"&&Object.values(I).some(c=>{const l=c.split(":")[0].replace(/\/$/,"");return t.slug===l||t.slug?.startsWith(c)})||typeof t.slug=="string"&&t.slug?.endsWith("/mcp")&&H.instance().canAccessFeature("mcp"))return!0;if(r&&Object.keys(n).length===0)return!!e.isAuthenticated;const s=b(n,e.teams||[]),o=t[D]||y(s,t);if(Object.keys(o||{}).length===0)return!1;if(Object.keys(o).length===1&&o[u]&&o[u].toLowerCase()!=="none")return!0;const a=(e?.email?[...e?.teams||[],e?.email]:e?.teams)||[],i=[];for(const c of a??[])o[c]?i.push(o[c]):o[u]&&c!==e?.email&&i.push(o[u]);return i.length?i.some(c=>c.toLowerCase()!=="none"):!1}function ht(t,e,n,r){if(!t.startsWith(L)&&!t.startsWith(g))return!0;const s=t.replace(new RegExp(`^${L}/`),"").replace(new RegExp(`^${g}/`),""),a=s==="."?"":s,i={[R]:{slug:t,fsPath:a},slug:t};return E(i,r,e,n)}function At(t,e,n,r,s){if(!t.startsWith(F))return!0;const o=t.match(/.*\..{64}\.([A-Fa-f0-9]{8})\.[^\.]+$/)?.[1];if(!o)return!0;const a=r[o];if(!a)return!0;const{base:i,ext:c}=A.parse(t),l=i.split(".")[0],p=c.split(".").join(""),m=a==="."?"":a,T={[R]:{slug:t,fsPath:A.posix.join(m,`${l}.${p}`)},slug:t};return E(T,s,e,n)}async function Rt(t,e){const{isAuthenticated:n=!1,idpAccessToken:r,federatedAccessToken:s,federatedIdToken:o,...a}=await Y(t,e),{teams:i=[]}=a;let c;return n?c=i.filter(l=>l!==P):c=[P],{isAuthenticated:n,idpAccessToken:r,teams:c,claims:a}}function C(t,e,n={},r=!1){if(!t)return t;if(Array.isArray(t)){const s=[];for(const o of t){const a=C(o,e,n,r);a!==void 0&&s.push(a)}return s}if(typeof t=="object"){if(!E(t,e,n,r))return;let s=!1;const o={};for(const a in t){if(a===D||a===R)continue;if(G.has(a)){o[a]=t[a];continue}const i=C(t[a],e,n,r);if(a==="items"&&Array.isArray(i)&&i.length===0&&t[a].length!==0){s=!0;continue}i!==void 0&&(o[a]=i)}return s?void 0:o}return t}function yt(t){return typeof t=="string"?t.split(" ").filter(Boolean):Array.isArray(t)?t.map(e=>e.toString()):[]}function Et(t,e){if(!e)return;const n=e.content;if(!n)return e;const r=Object.entries(n).flatMap(([o,a])=>o===_?[[o,a]]:[[o,a],...t.localeFolders.map(i=>[o.startsWith("/")?`/${i.toLocaleLowerCase()}${o}`:A.posix.join(t.localizationFolder,i,o),a])]),s=Object.fromEntries(r);return{...e,content:s}}async function Tt(t,e){if(!e)return{};const n={},r=new Set((await t.scan()).flatMap(({relativePath:s})=>{const{versionFolderPath:o}=N(s)||{},a=A.dirname(s);return o?[o,a]:a}));for(const s of r)n[W(s)]=s;return n}const h=t=>typeof t=="object"&&t!==null&&!Array.isArray(t);function K(t){return t?t.split("/").filter(Boolean).some(n=>n.startsWith(".")):!1}const V=t=>{if(t&&h(t)&&("content"in t&&h(t.content)||"reunite"in t&&h(t.reunite)||"features"in t&&h(t.features)||t.teamFolders&&t.teamNamePatterns)){const e=Object.values(t.content||{});if(e.length===0)return!0;if(e.every(h))return e.every(n=>Object.values(n).every(r=>typeof r=="string"))}return!1},Pt=async t=>{if(t){if(Object.keys(t).length===0)return{};if(V(t))return J(t);await B.panicOnContentError(`You are using an incorrect format of ${k("rbac:")} configuration. See: https://redocly.com/docs/realm/access`)}},J=t=>{const e={...t};if(e.content){const n={};for(const r in e.content)if(e.content[r]!==void 0){const s=w(r);n[s]=e.content[r]}e.content=n}return e};function xt(t,e){const n=t.fsPath,r=t.slug,s=[];if(U(e)){const o=$(e,[n,r]);if(o){const a=e?.teamNamePatterns?.map(c=>c.replace("{teamPathSegment}",o.teamPathSegment).replace("{projectRole}","read"))??[];s.push(...a);const i=y({content:{...M(e),...e.content}},t);s.push(...x(i))}else{const a=y(e,t);s.push(...x(a))}}else{const o=y(e,t);s.push(...x(o))}return Q(e,s)}function x(t){if(!t)return[];const e=[],n=u in t?{authenticated:t[u],anonymous:t[u]}:{};for(const[r,s]of Object.entries({...n,...t}))s.toLowerCase()!=="none"&&r!==u&&e.push(r);return e}function Q(t,e){return e.map(r=>v(t,r)??{teamName:r}).map(r=>r.projectRole&&r.projectRole!=="READ"?r.teamName?.toLowerCase().replace(r.projectRole?.toLowerCase?.()??"","read")??"":r.teamName?.toLowerCase()??"")}export{S as PROJECT_ROLES_ORDERED_BY_ACCESS_LEVEL,Et as applyL10nToRbacConfig,At as canAccessAsset,pt as canAccessFeature,E as canAccessResource,ht as canDownloadApiDefinition,Q as expandTeamsForRead,x as extractTeamsForSearch,C as filterDataByAccessDeep,y as getAllowedTeamsForRoute,Rt as getAuthDetailsFromCookies,mt as getHigherRole,xt as getRbacTeamsForSearch,V as isRbacConfigValid,dt as isResourcePubliclyAccessible,J as normalizeRbacConfig,Pt as parseRbacConfig,yt as parseTeamClaimToArray,Tt as resolveDirectoryHashes};

package/dist/server/web-server/auth.js

@@ -1,4 +1,4 @@
-import"../node-crypto-polyfill.js";import{DOMParser as b}from"@xmldom/xmldom";import{SignedXml as B}from"xml-crypto";import F from"xpath";import{deflateSync as J,inflateSync as q}from"fflate";import{createHash as H}from"crypto";import{AuthProviderType as u,DEFAULT_TEAM_CLAIM_NAME as W}from"@redocly/config";import{AUTH_URL as K,JWT_SECRET_KEY as _}from"../constants/common.js";import{getPathPrefix as Q,withPathPrefix as X}from"@redocly/theme/core/utils";import{DEFAULT_AUTHENTICATED_TEAM as Y,REQUIRED_OIDC_SCOPES as D,ServerRoutes as P}from"../../constants/common.js";import{appendQueryParams as G}from"../../utils/url/append-query-params.js";import{logger as Z}from"../tools/notifiers/logger.js";import{AlgorithmTypes as I,JwtTokenExpired as ee}from"./jwt/types.js";import*as p from"./jwt/jwt.js";import{parseTeamClaimToArray as te,randomString as ne,randomUUID as v}from"../utils/index.js";import{arrayBufferToBase64 as ae,decodeBase64 as R,encodeBase64URL as re,urlSafeBase64 as j}from"./jwt/encode.js";import{formatSamlCertificate as oe}from"./utils/format-saml-certificate.js";function E(e){return e?.type===u.OIDC}function se(e){return e?.type===u.SAML2}async function Ee(e,t){if(E(t))return ie(e,t);if(se(t))return ce(e,t)}async function ie(e,t){const a=await V(e,t),n=new Set((t.scopes||[]).concat(D)),r=t.authorizationRequestCustomParams||{};return{type:u.OIDC,idpId:e,name:"OAuth provider",authorizationEndpoint:a.authorization_endpoint,clientId:t.clientId,responseType:"code",scope:Array.from(n).join(" "),extraParams:r,pkce:t.pkce}}function ce(e,t){return{type:u.SAML2,idpId:e,name:"SAML2 provider",ssoUrl:t.ssoUrl,issuerId:t.issuerId,entityId:t.entityId||t.issuerId}}async function Ne(e,t,a,n,r={}){const o=new Set((n.scopes||[]).concat(D));return await fetch(e,{method:"POST",body:new URLSearchParams({client_id:n.clientId,scope:Array.from(o).join(" "),code:t,redirect_uri:N(a),grant_type:"authorization_code",...n.clientSecret?{client_secret:n.clientSecret}:{},...r}).toString(),headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"}}).then(s=>s.json())}function de(e,{authorizationEndpoint:t,clientId:a,responseType:n,scope:r,extraParams:o,idpId:s,pkce:i},m,A,w){if(!t||!a||!n||!r)return{loginUrl:void 0};const d=new URL(t),f=w?.redirectUriOverride??`${e}${X(P.OIDC_CALLBACK)}`,S={state:v(),idpId:s,redirectUri:f,redirectTo:m,branch:w?.branchOverride??ue(e),inviteCode:A,source:w?.sourceOverride??"portal"},h={};if(i){const l=j(ne(50)),g=j(H("sha256").update(l).digest("base64")),x="S256";d.searchParams.append("code_challenge",g),d.searchParams.append("code_challenge_method",x),h.code_verifier={value:l,options:{secure:!0,httpOnly:!0,expires:new Date(Date.now()+1e3*60*10),path:Q()||"/"}}}d.searchParams.append("client_id",a),d.searchParams.append("scope",r),d.searchParams.append("response_type",n),d.searchParams.append("redirect_uri",N(f)),d.searchParams.append("state",re(JSON.stringify(S)));for(const l in o)o[l]!==void 0&&d.searchParams.append(l,o[l]);return{loginUrl:d.toString(),cookies:h}}function Ve(e,t,a,n){const r=new URL(e);return r.searchParams.append("post_logout_redirect_uri",t),n&&r.searchParams.append("state",n),r.searchParams.append("id_token_hint",a),r.toString()}async function ze(e){const t=Math.floor(Date.now()/1e3),a=t+(e.ttlSec??600);return p.sign({type:"mcp_auth_code",client_id:e.clientId,redirect_uri:e.redirectUri,id_token:e.idToken,iat:t,exp:a},_)}async function $e(e){const{header:t,payload:a}=p.decode(e),r=Object.values(I).includes(t.alg)?t.alg:I.HS256;if(await p.verify(e,_,r),!a||typeof a!="object")throw new Error("Malformed authorization code");const o=a;if((o.typ??o.type)!=="mcp_auth_code")throw new Error("Invalid authorization code type");const i=a;if(!i.client_id||!i.redirect_uri)throw new Error("Authorization code missing required claims");if(i.exp&&Date.now()>=i.exp*1e3)throw new Error("Authorization code expired");return i}function N(e){return e.match(/^https:\/\/preview-[^\.]+--/)?"https://previewauth--"+e.split("--")[1]:e.match(/^(https:\/\/[^\.]+)--[^\.]+\.preview\./)?e.replace(/^(https:\/\/[^\.]+?)--[^\.]+\.preview\./,"$1.previewauth."):e}function ue(e){return e.match(/^(https:\/\/[^\.]+)--([^\.]+)\.preview\./)?.[2]||void 0}function le(e){return e.type===u.OIDC}function me(e){return e.type===u.SAML2}function Be(e,t,a,n){return le(e)?de(t,e,a,n):me(e)?pe(t,e,a,n):{}}function pe(e,t,a,n){const o=`<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
+import"../node-crypto-polyfill.js";import{DOMParser as b}from"@xmldom/xmldom";import{SignedXml as B}from"xml-crypto";import F from"xpath";import{deflateSync as J,inflateSync as q}from"fflate";import{createHash as H}from"crypto";import{AuthProviderType as u,DEFAULT_TEAM_CLAIM_NAME as W}from"@redocly/config";import{AUTH_URL as K,JWT_SECRET_KEY as _}from"../constants/common.js";import{getPathPrefix as Q,withPathPrefix as X}from"@redocly/theme/core/utils";import{DEFAULT_AUTHENTICATED_TEAM as Y,REQUIRED_OIDC_SCOPES as D,ServerRoutes as P}from"../../constants/common.js";import{appendQueryParams as G}from"../../utils/url/append-query-params.js";import{logger as Z}from"../tools/notifiers/logger.js";import{randomString as ee}from"../utils/crypto/random-string.js";import{randomUUID as v}from"../utils/crypto/random-uuid.js";import{AlgorithmTypes as I,JwtTokenExpired as te}from"./jwt/types.js";import*as p from"./jwt/jwt.js";import{parseTeamClaimToArray as ne}from"../utils/index.js";import{arrayBufferToBase64 as ae,decodeBase64 as R,encodeBase64URL as re,urlSafeBase64 as j}from"./jwt/encode.js";import{formatSamlCertificate as oe}from"./utils/format-saml-certificate.js";function E(e){return e?.type===u.OIDC}function se(e){return e?.type===u.SAML2}async function Ve(e,t){if(E(t))return ie(e,t);if(se(t))return ce(e,t)}async function ie(e,t){const a=await V(e,t),n=new Set((t.scopes||[]).concat(D)),r=t.authorizationRequestCustomParams||{};return{type:u.OIDC,idpId:e,name:"OAuth provider",authorizationEndpoint:a.authorization_endpoint,clientId:t.clientId,responseType:"code",scope:Array.from(n).join(" "),extraParams:r,pkce:t.pkce}}function ce(e,t){return{type:u.SAML2,idpId:e,name:"SAML2 provider",ssoUrl:t.ssoUrl,issuerId:t.issuerId,entityId:t.entityId||t.issuerId}}async function ze(e,t,a,n,r={}){const o=new Set((n.scopes||[]).concat(D));return await fetch(e,{method:"POST",body:new URLSearchParams({client_id:n.clientId,scope:Array.from(o).join(" "),code:t,redirect_uri:N(a),grant_type:"authorization_code",...n.clientSecret?{client_secret:n.clientSecret}:{},...r}).toString(),headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"}}).then(s=>s.json())}function de(e,{authorizationEndpoint:t,clientId:a,responseType:n,scope:r,extraParams:o,idpId:s,pkce:i},m,A,w){if(!t||!a||!n||!r)return{loginUrl:void 0};const d=new URL(t),f=w?.redirectUriOverride??`${e}${X(P.OIDC_CALLBACK)}`,S={state:v(),idpId:s,redirectUri:f,redirectTo:m,branch:w?.branchOverride??ue(e),inviteCode:A,source:w?.sourceOverride??"portal"},h={};if(i){const l=j(ee(50)),g=j(H("sha256").update(l).digest("base64")),x="S256";d.searchParams.append("code_challenge",g),d.searchParams.append("code_challenge_method",x),h.code_verifier={value:l,options:{secure:!0,httpOnly:!0,expires:new Date(Date.now()+1e3*60*10),path:Q()||"/"}}}d.searchParams.append("client_id",a),d.searchParams.append("scope",r),d.searchParams.append("response_type",n),d.searchParams.append("redirect_uri",N(f)),d.searchParams.append("state",re(JSON.stringify(S)));for(const l in o)o[l]!==void 0&&d.searchParams.append(l,o[l]);return{loginUrl:d.toString(),cookies:h}}function $e(e,t,a,n){const r=new URL(e);return r.searchParams.append("post_logout_redirect_uri",t),n&&r.searchParams.append("state",n),r.searchParams.append("id_token_hint",a),r.toString()}async function Be(e){const t=Math.floor(Date.now()/1e3),a=t+(e.ttlSec??600);return p.sign({type:"mcp_auth_code",client_id:e.clientId,redirect_uri:e.redirectUri,id_token:e.idToken,iat:t,exp:a},_)}async function Fe(e){const{header:t,payload:a}=p.decode(e),r=Object.values(I).includes(t.alg)?t.alg:I.HS256;if(await p.verify(e,_,r),!a||typeof a!="object")throw new Error("Malformed authorization code");const o=a;if((o.typ??o.type)!=="mcp_auth_code")throw new Error("Invalid authorization code type");const i=a;if(!i.client_id||!i.redirect_uri)throw new Error("Authorization code missing required claims");if(i.exp&&Date.now()>=i.exp*1e3)throw new Error("Authorization code expired");return i}function N(e){return e.match(/^https:\/\/preview-[^\.]+--/)?"https://previewauth--"+e.split("--")[1]:e.match(/^(https:\/\/[^\.]+)--[^\.]+\.preview\./)?e.replace(/^(https:\/\/[^\.]+?)--[^\.]+\.preview\./,"$1.previewauth."):e}function ue(e){return e.match(/^(https:\/\/[^\.]+)--([^\.]+)\.preview\./)?.[2]||void 0}function le(e){return e.type===u.OIDC}function me(e){return e.type===u.SAML2}function Je(e,t,a,n){return le(e)?de(t,e,a,n):me(e)?pe(t,e,a,n):{}}function pe(e,t,a,n){const o=`<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
     xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
     Version="2.0"
     ID="_${v()}"
@@ -9,4 +9,4 @@ import"../node-crypto-polyfill.js";import{DOMParser as b}from"@xmldom/xmldom";im
     <samlp:NameIDPolicy
       AllowCreate="true"
       Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
-  </samlp:AuthnRequest>`,s=fe(o);return{loginUrl:G(t.ssoUrl,{SAMLRequest:s,RelayState:JSON.stringify({idpId:t.idpId,redirectTo:a,inviteCode:n,source:"portal"})})}}function fe(e){return ae(J(new TextEncoder().encode(e)).buffer)}function Fe(e){const t=R(e);if(t.startsWith("<samlp:Response")||t.indexOf("<saml2p:Response")>-1)return t;const a=q(new Uint8Array(atob(e).split("").map(n=>n.charCodeAt(0))));return new TextDecoder().decode(a)}function Je(e){try{return JSON.parse(R(e||""))}catch{throw new Error("Invalid OAuth2 state")}}function qe(e){const t=new b().parseFromString(e,"application/xml"),n=c(t,"//*[local-name(.)='StatusCode']/@Value")[0]?.nodeValue?.endsWith("Success")||!1,o=c(t,"//*[local-name(.)='Response']/@Destination")[0]?.nodeValue||"",s=c(t,"//*[local-name(.)='Assertion']//*[local-name(.)='Issuer']/text()")[0],i=s&&s.nodeValue||void 0,m=c(t,"//*[local-name(.)='Audience']/text()")[0],A=m&&m.nodeValue||void 0,d=c(t,"//*[local-name(.)='Assertion']//*[local-name(.)='X509Certificate']/text()")[0]?.nodeValue||"",f=c(t,"//*[local-name(.)='Subject']//*[local-name(.)='NameID']/text()")[0],S=f&&f.nodeValue||"",h=c(t,"//*[local-name(.)='Subject']//*[local-name(.)='NameID']/@Format")[0],l=h&&h.nodeValue||"",g=c(t,"//*[local-name(.)='Conditions']/@NotOnOrAfter")[0],x=he(g),T={},k=c(t,"//*[local-name(.)='AttributeStatement']//*[local-name(.)='Attribute']");if(k.length)for(const C of k){const O=c(C,"./@Name")[0];if(O.nodeValue){const U=c(C,"./*[local-name(.)='AttributeValue']/text()")[0];U?.nodeValue&&(T[O.nodeValue]=U.nodeValue)}}return{uid:S,success:n,expiresAt:x,issuerId:i,entityId:A,attrs:T,cert:d,nameFormat:l,destination:o}}function he(e){const t=typeof e?.nodeValue=="string"&&L(Date.parse(e.nodeValue)),a=L(Date.now()),n=L(Date.now()+720*60*1e3);return t?t>a&&t<n?n:t:a}function L(e){return Math.floor(e/1e3)}const M={},y={jwks:{}};async function V(e,t){return M[e]||(M[e]=t.configurationUrl?await z(t.configurationUrl):t.configuration),M[e]}async function ye(e){for(const t of Object.keys(e)){const a=e[t];if(!E(a))continue;const n=await V(t,a);if(n.jwks_uri){const r=await z(n.jwks_uri);for(const o of r.keys)y.jwks[o.kid]={...o,idpId:t}}}}async function z(e){return fetch(e,{headers:{Accept:"application/json"}}).then(t=>t.json())}async function He(e){return fetch(`${K}/oidc/userinfo`,{headers:{Accept:"application/json",Authorization:`Bearer ${e}`}}).then(t=>t.status===200?t.json():void 0).catch(()=>{})}function We(e){if(!e.configurationUrl)return!1;const t=new URL(e.configurationUrl);return["localhost","127.0.0.1","blueharvest.cloud","bhstage.cloud","cloud.redocly.com","beta.redocly.com","cloud.eu.redocly.com","beta.eu.redocly.com","cba.au.redocly.com"].some(n=>we(t.hostname,n))}function we(e,t){return e===t||e.endsWith(`.${t}`)}async function Ke(e,t){const a=new b().parseFromString(e),n=c(a,"//*[local-name(.)='Signature' and namespace-uri(.)='http://www.w3.org/2000/09/xmldsig#']")[0];if(!n)throw new Error("Cannot find Signature in the SAML response");const r=oe(t),o=new B({publicCert:r});o.loadSignature(n);try{return o.checkSignature(e)}catch{return!1}}function Qe(e,t,a,n){t==="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"&&(e=a["http://schemas.microsoft.com/identity/claims/objectidentifier"]);let r;(t==="urn:oasis:names:tc:SAML:2.0:nameid-format:email"||t==="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress")&&(r=e),t==="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"&&e?.match(/.+@.+/)&&(r=e);const o=a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"],s=o?.match(/.+@.+/);return r=r||a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"]||(s?o:void 0),r=r?.toLowerCase(),{sub:e,given_name:a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"],family_name:a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"],name:a["http://schemas.microsoft.com/identity/claims/displayname"]||o,email:r,email_verified:!0,teams:n?te(a[n]):[]}}function $(e,t={}){return e.map(a=>t[a]||a)}async function Xe(e,t){if(!t)return{};const a=t.authorization;if(!a)return{};try{const n=p.decode(a);if(n.header.alg===I.RS256){y.jwks[n.header.kid]===void 0&&await ye(e);const m=y.jwks[n.header.kid];if(!m)return y.jwks[n.header.kid]=null,{};await p.verify(a,m,n.header.alg)}else await p.verify(a,_,n.header.alg);const r=n.payload.idpId||y.jwks[n.header.kid]?.idpId,o=e[r]||{},s=ge(o),i=Se(o);return{...n.payload,email:n.payload.email?.toLowerCase(),idpId:r,teams:Array.from(new Set([...$(n.payload.teams||[],i),..."defaultTeams"in o&&o.defaultTeams||[],...$("teamsClaimName"in o&&n.payload[s||""]||[],i),Y])),name:Ae(n.payload),isAuthenticated:!0,idpAccessToken:t.idp_access_token,federatedAccessToken:t.federated_access_token,federatedIdToken:t.federated_id_token,authCookie:a}}catch(n){n instanceof ee||Z.error("Malformed JWT token: %s",n.message)}return{}}function Ae(e){return e.name||e.given_name||e.email}function Se(e){switch(e.type){case u.SAML2:return e.teamsAttributeMap;case u.OIDC:return e.teamsClaimMap;default:return}}function ge(e){switch(e.type){case u.SAML2:return e.teamsAttributeName;case u.OIDC:return e.teamsClaimName;default:return W}}function c(e,t){return F.select(t,e)||[]}export{Be as buildLoginUrl,de as buildOidcLoginUrl,Ve as buildOidcLogoutUrl,pe as buildSAML2LoginUrl,ze as createMcpAuthorizationCode,Fe as decodeSamlResponse,fe as encodeSAML2,Qe as extractUserClaims,Ee as getAuthProviderLoginParams,ie as getOidcLoginParams,V as getOidcMetadata,He as getRedoclyTokenPayload,ce as getSaml2LoginParams,Xe as getUserParamsFromCookies,Ae as getUsernameFromPayload,E as isOidcProviderConfig,We as isRedoclySso,se as isSaml2ProviderConfig,Ne as oidcExchangeCodeForToken,Je as parseOidcState,ue as parsePreviewBranch,qe as parseSamlResponse,N as rewritePreviewAuthRedirectUri,$e as verifyMcpAuthorizationCode,Ke as verifySAMLResponse};
+  </samlp:AuthnRequest>`,s=fe(o);return{loginUrl:G(t.ssoUrl,{SAMLRequest:s,RelayState:JSON.stringify({idpId:t.idpId,redirectTo:a,inviteCode:n,source:"portal"})})}}function fe(e){return ae(J(new TextEncoder().encode(e)).buffer)}function qe(e){const t=R(e);if(t.startsWith("<samlp:Response")||t.indexOf("<saml2p:Response")>-1)return t;const a=q(new Uint8Array(atob(e).split("").map(n=>n.charCodeAt(0))));return new TextDecoder().decode(a)}function He(e){try{return JSON.parse(R(e||""))}catch{throw new Error("Invalid OAuth2 state")}}function We(e){const t=new b().parseFromString(e,"application/xml"),n=c(t,"//*[local-name(.)='StatusCode']/@Value")[0]?.nodeValue?.endsWith("Success")||!1,o=c(t,"//*[local-name(.)='Response']/@Destination")[0]?.nodeValue||"",s=c(t,"//*[local-name(.)='Assertion']//*[local-name(.)='Issuer']/text()")[0],i=s&&s.nodeValue||void 0,m=c(t,"//*[local-name(.)='Audience']/text()")[0],A=m&&m.nodeValue||void 0,d=c(t,"//*[local-name(.)='Assertion']//*[local-name(.)='X509Certificate']/text()")[0]?.nodeValue||"",f=c(t,"//*[local-name(.)='Subject']//*[local-name(.)='NameID']/text()")[0],S=f&&f.nodeValue||"",h=c(t,"//*[local-name(.)='Subject']//*[local-name(.)='NameID']/@Format")[0],l=h&&h.nodeValue||"",g=c(t,"//*[local-name(.)='Conditions']/@NotOnOrAfter")[0],x=he(g),T={},k=c(t,"//*[local-name(.)='AttributeStatement']//*[local-name(.)='Attribute']");if(k.length)for(const C of k){const O=c(C,"./@Name")[0];if(O.nodeValue){const U=c(C,"./*[local-name(.)='AttributeValue']/text()")[0];U?.nodeValue&&(T[O.nodeValue]=U.nodeValue)}}return{uid:S,success:n,expiresAt:x,issuerId:i,entityId:A,attrs:T,cert:d,nameFormat:l,destination:o}}function he(e){const t=typeof e?.nodeValue=="string"&&L(Date.parse(e.nodeValue)),a=L(Date.now()),n=L(Date.now()+720*60*1e3);return t?t>a&&t<n?n:t:a}function L(e){return Math.floor(e/1e3)}const M={},y={jwks:{}};async function V(e,t){return M[e]||(M[e]=t.configurationUrl?await z(t.configurationUrl):t.configuration),M[e]}async function ye(e){for(const t of Object.keys(e)){const a=e[t];if(!E(a))continue;const n=await V(t,a);if(n.jwks_uri){const r=await z(n.jwks_uri);for(const o of r.keys)y.jwks[o.kid]={...o,idpId:t}}}}async function z(e){return fetch(e,{headers:{Accept:"application/json"}}).then(t=>t.json())}async function Ke(e){return fetch(`${K}/oidc/userinfo`,{headers:{Accept:"application/json",Authorization:`Bearer ${e}`}}).then(t=>t.status===200?t.json():void 0).catch(()=>{})}function Qe(e){if(!e.configurationUrl)return!1;const t=new URL(e.configurationUrl);return["localhost","127.0.0.1","blueharvest.cloud","bhstage.cloud","cloud.redocly.com","beta.redocly.com","cloud.eu.redocly.com","beta.eu.redocly.com","cba.au.redocly.com"].some(n=>we(t.hostname,n))}function we(e,t){return e===t||e.endsWith(`.${t}`)}async function Xe(e,t){const a=new b().parseFromString(e),n=c(a,"//*[local-name(.)='Signature' and namespace-uri(.)='http://www.w3.org/2000/09/xmldsig#']")[0];if(!n)throw new Error("Cannot find Signature in the SAML response");const r=oe(t),o=new B({publicCert:r});o.loadSignature(n);try{return o.checkSignature(e)}catch{return!1}}function Ye(e,t,a,n){t==="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"&&(e=a["http://schemas.microsoft.com/identity/claims/objectidentifier"]);let r;(t==="urn:oasis:names:tc:SAML:2.0:nameid-format:email"||t==="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress")&&(r=e),t==="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"&&e?.match(/.+@.+/)&&(r=e);const o=a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"],s=o?.match(/.+@.+/);return r=r||a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"]||(s?o:void 0),r=r?.toLowerCase(),{sub:e,given_name:a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"],family_name:a["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"],name:a["http://schemas.microsoft.com/identity/claims/displayname"]||o,email:r,email_verified:!0,teams:n?ne(a[n]):[]}}function $(e,t={}){return e.map(a=>t[a]||a)}async function Ge(e,t){if(!t)return{};const a=t.authorization;if(!a)return{};try{const n=p.decode(a);if(n.header.alg===I.RS256){y.jwks[n.header.kid]===void 0&&await ye(e);const m=y.jwks[n.header.kid];if(!m)return y.jwks[n.header.kid]=null,{};await p.verify(a,m,n.header.alg)}else await p.verify(a,_,n.header.alg);const r=n.payload.idpId||y.jwks[n.header.kid]?.idpId,o=e[r]||{},s=ge(o),i=Se(o);return{...n.payload,email:n.payload.email?.toLowerCase(),idpId:r,teams:Array.from(new Set([...$(n.payload.teams||[],i),..."defaultTeams"in o&&o.defaultTeams||[],...$("teamsClaimName"in o&&n.payload[s||""]||[],i),Y])),name:Ae(n.payload),isAuthenticated:!0,idpAccessToken:t.idp_access_token,federatedAccessToken:t.federated_access_token,federatedIdToken:t.federated_id_token,authCookie:a}}catch(n){n instanceof te||Z.error("Malformed JWT token: %s",n.message)}return{}}function Ae(e){return e.name||e.given_name||e.email}function Se(e){switch(e.type){case u.SAML2:return e.teamsAttributeMap;case u.OIDC:return e.teamsClaimMap;default:return}}function ge(e){switch(e.type){case u.SAML2:return e.teamsAttributeName;case u.OIDC:return e.teamsClaimName;default:return W}}function c(e,t){return F.select(t,e)||[]}export{Je as buildLoginUrl,de as buildOidcLoginUrl,$e as buildOidcLogoutUrl,pe as buildSAML2LoginUrl,Be as createMcpAuthorizationCode,qe as decodeSamlResponse,fe as encodeSAML2,Ye as extractUserClaims,Ve as getAuthProviderLoginParams,ie as getOidcLoginParams,V as getOidcMetadata,Ke as getRedoclyTokenPayload,ce as getSaml2LoginParams,Ge as getUserParamsFromCookies,Ae as getUsernameFromPayload,E as isOidcProviderConfig,Qe as isRedoclySso,se as isSaml2ProviderConfig,ze as oidcExchangeCodeForToken,He as parseOidcState,ue as parsePreviewBranch,We as parseSamlResponse,N as rewritePreviewAuthRedirectUri,Fe as verifyMcpAuthorizationCode,Xe as verifySAMLResponse};

package/dist/server/web-server/routes/catalog/bff-catalog.d.ts

@@ -1,4 +1,5 @@
 import type { Handler } from 'hono';
 import type { Store } from '../../../store.js';
 export declare function bffCatalogHandler(store: Store): Handler;
+export declare function bffCatalogRevisionsHandler(store: Store): Handler;
 //# sourceMappingURL=bff-catalog.d.ts.map

package/dist/server/web-server/routes/catalog/bff-catalog.js

@@ -1 +1 @@
-import{CatalogEntitiesService as c}from"../../../plugins/catalog-entities/database/catalog-entities-service.js";import{createPaginationParamsValidator as y}from"../../../providers/database/pagination/schemas.js";const m=["type","key","title","summary","tags","metadata","metadata.*","git","contact","links","id","source","sourceFile","createdAt","updatedAt","domains","owners"];function u(n){return async t=>{const e=await c.getInstance({baseDbDir:n.serverOutDir}),a=t.req.param("entityKey");if(!a){const r=t.req.query(),s=y(m).parse(r),o=await e.getEntitiesWithRelations(s);return t.json(o)}const i=await e.getEntityWithRelationsByKey(a);return i?t.json(i):t.json({message:"Entity not found"},404)}}export{u as bffCatalogHandler};
+import{CatalogEntitiesService as o}from"../../../plugins/catalog-entities/database/catalog-entities-service.js";import{createPaginationParamsValidator as y}from"../../../providers/database/pagination/schemas.js";const c=["type","key","title","summary","tags","metadata","metadata.*","git","contact","links","id","source","sourceFile","version","revision","createdAt","updatedAt","domains","owners"];function f(a){return async t=>{const n=await o.getInstance({baseDbDir:a.serverOutDir}),e=t.req.param("entityKey");if(!e){const u=t.req.query(),l=y(c).parse(u),m=await n.getEntitiesWithRelations(l);return t.json(m)}const i=t.req.query(),s=y(c).parse(i),r=await n.getEntityWithRelationsByKey(e,s);return r?t.json(r):t.json({message:"Entity not found"},404)}}function p(a){return async t=>{const n=await o.getInstance({baseDbDir:a.serverOutDir}),e=t.req.param("entityKey");if(!e)return t.json({message:"Missing entityKey"},400);const i=t.req.query("version")??null,s=await n.listEntityRevisions(e,i);return t.json({items:s})}}export{f as bffCatalogHandler,p as bffCatalogRevisionsHandler};

package/dist/server/web-server/routes/index.js

@@ -1 +1 @@
-import{serveStatic as s}from"hono/serve-static";import{withPathPrefix as e,withoutPathPrefix as f}from"@redocly/theme/core/utils";import{ServerRoutes as i}from"../../../constants/common.js";import{PUBLIC_STATIC_FOLDER as c}from"../../constants/common.js";import{authMiddleware as R}from"../middleware/authMiddleware.js";import{ensureSearchData as g}from"../middleware/ensureSearchData.js";import{dynamicMiddleware as P}from"../middleware/dynamic-middleware/dynamic-middleware.js";import{installRoutes as S}from"../../plugins/dev-onboarding/api/routes/index.js";import{authorizeHandler as I,oidcCallbackHandler as r,logoutHandler as T,idpLoginHandler as h,redoclyLoginCallbackHandler as N,samlCallbackHandler as D,redoclyTokenLoginHandler as M,inviteHandler as U}from"./auth.js";import{appDataHandler as B}from"./app-data.js";import{searchFacetsHandler as w,searchHandler as G}from"./search.js";import{dynamicRouteHandler as F}from"./dynamic-route.js";import{pageDataHandler as K,sharedPageDataHandler as y}from"./page-data.js";import{pathPrefixRedirectHandler as k}from"./path-prefix-redirect.js";import{getRoutesByLineHandler as E,resolvePathHandler as o,resolvePathsHandler as Y,resolveSlugHandler as p}from"./resolve-route.js";import{feedbackHandler as v}from"./feedback.js";import{loggerMiddleware as b}from"../middleware/loggerMiddleware.js";import{responseHeadersMiddleware as V}from"../middleware/responseHeadersMiddleware.js";import{idleTimeoutMiddleware as x}from"../middleware/idleTimeoutMiddleware.js";import{otelTracesHandler as z}from"./otel/otel.js";import{healthCheckHandler as Z}from"./health.js";import{askAiHandler as $}from"./ask-ai.js";import{replayOauth2RedirectCallbackHandler as q}from"./replay-oauth2-redirect.js";import{mcpOAuthProtectedResourceHandler as W,mcpOAuthAuthorizationServerHandler as j,mcpDynamicClientRegistrationHandler as J,mcpAuthorizationHandler as Q,mcpTokenPortalHandler as X,mcpCallbackHandler as _}from"./mcp-oauth.js";import{corsMiddleware as O}from"../middleware/corsMiddleware.js";import{installApiRoutes as u}from"./api-routes/api-routes.js";import{cookieMiddleware as aa}from"../middleware/cookieMiddleware.js";import{staticContentHandler as ea}from"../routes/static-content.js";import{infoHandler as L}from"./info.js";import{catalogHandler as ia}from"./catalog/catalog.js";import{catalogRelationsHandler as la}from"./catalog/catalog-relations.js";import{bffCatalogHandler as ta}from"./catalog/bff-catalog.js";import{bffCatalogRelatedEntitiesHandler as ma}from"./catalog/bff-catalog-related-entities.js";import{catalogAuthMiddleware as C}from"../middleware/catalogAuthMiddleware.js";import{telemetryMiddleware as na}from"../middleware/telemetry-middleware.js";import{errorHandler as Aa}from"./error.js";function Za(a,l,t){const{resolveRouteData:n,readStaticAsset:A}=t;a.use("*",x()),a.use("*",aa()),a.use("*",P(l)),a.use("*",R(l)),a.use("*",b()),a.use("*",V(l)),a.use("*",na()),a.use(e("*"),s({root:`./${c}`,getContent:(m,H)=>ea(m,H,l,A),rewriteRequestPath:m=>f(m)})),a.use(e(i.FEEDBACK),O({allowMethods:["POST"]})),a.use(e(i.ASK_AI),O({allowMethods:["POST"]})),a.use("*",da(l));const d=g(l);a.use(e(i.INFO),L()),process.env.NEW_CATALOG_ENABLED==="true"&&(a.use(e(i.CATALOG_ENTITIES),C({secureMethods:["POST","PUT","DELETE","PATCH"]})),a.use(e(i.CATALOG_ENTITIES_RELATIONS),C({secureMethods:["POST","PUT","DELETE","PATCH"]})),a.use(e(i.CATALOG_ENTITIES),ia(l)),a.use(e(i.CATALOG_ENTITIES_RELATIONS),la(l)),a.get(e(i.BFF_CATALOG_ENTITIES),ta(l)),a.get(e(i.BFF_CATALOG_RELATED_ENTITIES),ma(l))),a.get(e(i.SHARED_PAGE_DATA),y(l)),a.get(e(i.PAGE_DATA),K(l,n)),a.get(e(i.APP_DATA),B(l)),a.post(e(i.SEARCH),d,G(l)),a.post(e(i.SEARCH_FACETS),d,w(l)),a.post(e(i.AUTHORIZATION),I),a.post(e(i.LOGOUT),T(l)),a.get(e(i.LOGOUT),T(l)),a.get(e(i.OIDC_CALLBACK),r(l)),a.get(e(i.REDOCLY_TOKEN_LOGIN),M(l)),a.get(e(i.REDOCLY_LOGIN_CALLBACK),N()),a.get(e(i.IDP_LOGIN),h(l)),a.post(e(i.SAML_CALLBACK),D(l)),a.get(e(i.INVITE),U(l)),a.get(e(i.HEALTH),Z),a.get(e(i.MCP_OAUTH_PROTECTED_RESOURCE),W()),a.get(e(i.MCP_OAUTH_AUTHORIZATION_SERVER),j()),a.post(e(i.MCP_DYNAMIC_CLIENT_REGISTRATION),J()),a.get(e(i.MCP_AUTHORIZATION),Q()),a.post(e(i.MCP_TOKEN_PORTAL),X()),a.get(e(i.MCP_CALLBACK),_()),a.get(e(`${i.MCP_CALLBACK}/*`),_()),S(a,l),u(a,l),a.post(e(i.FEEDBACK),v(l)),a.post(e(i.RESOLVE_ROUTE_BY_PATH),o(l)),a.post(e(i.RESOLVE_ROUTES_BY_PATHS),Y(l)),a.post(e(i.RESOLVE_ROUTE_BY_SLUG),p(l)),a.post(e(i.ASK_AI),$(l)),a.get(e(i.GET_ROUTES_BY_LINE),E(l)),a.post(e(i.OTEL_TRACES),z),a.get(e(i.REPLAY_OAUTH2_CALLBACK),q),a.all(e("/*"),F(l,n,A)),a.get("*",k),a.onError(Aa)}function da(a){return async(l,t)=>{await a.waitForPluginsLifecycle(),await t()}}function $a(a,l){a.get(e(i.INFO),L()),a.post(e(i.RESOLVE_ROUTE_BY_PATH),o(l)),a.post(e(i.RESOLVE_ROUTE_BY_SLUG),p(l)),a.get(e(i.GET_ROUTES_BY_LINE),E(l))}export{$a as installDevRoutes,Za as installProdRoutes,da as waitForPluginsLifecycle};
+import{serveStatic as s}from"hono/serve-static";import{withPathPrefix as e,withoutPathPrefix as f}from"@redocly/theme/core/utils";import{ServerRoutes as i}from"../../../constants/common.js";import{PUBLIC_STATIC_FOLDER as R}from"../../constants/common.js";import{authMiddleware as c}from"../middleware/authMiddleware.js";import{ensureSearchData as g}from"../middleware/ensureSearchData.js";import{dynamicMiddleware as S}from"../middleware/dynamic-middleware/dynamic-middleware.js";import{installRoutes as I}from"../../plugins/dev-onboarding/api/routes/index.js";import{authorizeHandler as P,oidcCallbackHandler as r,logoutHandler as T,idpLoginHandler as h,redoclyLoginCallbackHandler as N,samlCallbackHandler as D,redoclyTokenLoginHandler as M,inviteHandler as B}from"./auth.js";import{appDataHandler as U}from"./app-data.js";import{searchFacetsHandler as G,searchHandler as w}from"./search.js";import{dynamicRouteHandler as F}from"./dynamic-route.js";import{pageDataHandler as K,sharedPageDataHandler as y}from"./page-data.js";import{pathPrefixRedirectHandler as k}from"./path-prefix-redirect.js";import{getRoutesByLineHandler as E,resolvePathHandler as o,resolvePathsHandler as v,resolveSlugHandler as p}from"./resolve-route.js";import{feedbackHandler as Y}from"./feedback.js";import{loggerMiddleware as b}from"../middleware/loggerMiddleware.js";import{responseHeadersMiddleware as V}from"../middleware/responseHeadersMiddleware.js";import{idleTimeoutMiddleware as x}from"../middleware/idleTimeoutMiddleware.js";import{otelTracesHandler as z}from"./otel/otel.js";import{healthCheckHandler as Z}from"./health.js";import{askAiHandler as $}from"./ask-ai.js";import{replayOauth2RedirectCallbackHandler as q}from"./replay-oauth2-redirect.js";import{mcpOAuthProtectedResourceHandler as W,mcpOAuthAuthorizationServerHandler as j,mcpDynamicClientRegistrationHandler as J,mcpAuthorizationHandler as Q,mcpTokenPortalHandler as X,mcpCallbackHandler as _}from"./mcp-oauth.js";import{corsMiddleware as O}from"../middleware/corsMiddleware.js";import{installApiRoutes as u}from"./api-routes/api-routes.js";import{cookieMiddleware as aa}from"../middleware/cookieMiddleware.js";import{staticContentHandler as ea}from"../routes/static-content.js";import{infoHandler as C}from"./info.js";import{catalogHandler as ia}from"./catalog/catalog.js";import{catalogRelationsHandler as la}from"./catalog/catalog-relations.js";import{bffCatalogHandler as ta,bffCatalogRevisionsHandler as ma}from"./catalog/bff-catalog.js";import{bffCatalogRelatedEntitiesHandler as na}from"./catalog/bff-catalog-related-entities.js";import{catalogAuthMiddleware as L}from"../middleware/catalogAuthMiddleware.js";import{telemetryMiddleware as Aa}from"../middleware/telemetry-middleware.js";import{errorHandler as da}from"./error.js";function $a(a,l,t){const{resolveRouteData:n,readStaticAsset:A}=t;a.use("*",x()),a.use("*",aa()),a.use("*",S(l)),a.use("*",c(l)),a.use("*",b()),a.use("*",V(l)),a.use("*",Aa()),a.use(e("*"),s({root:`./${R}`,getContent:(m,H)=>ea(m,H,l,A),rewriteRequestPath:m=>f(m)})),a.use(e(i.FEEDBACK),O({allowMethods:["POST"]})),a.use(e(i.ASK_AI),O({allowMethods:["POST"]})),a.use("*",Ta(l));const d=g(l);a.use(e(i.INFO),C()),process.env.NEW_CATALOG_ENABLED==="true"&&(a.use(e(i.CATALOG_ENTITIES),L({secureMethods:["POST","PUT","DELETE","PATCH"]})),a.use(e(i.CATALOG_ENTITIES_RELATIONS),L({secureMethods:["POST","PUT","DELETE","PATCH"]})),a.use(e(i.CATALOG_ENTITIES),ia(l)),a.use(e(i.CATALOG_ENTITIES_RELATIONS),la(l)),a.get(e(i.BFF_CATALOG_ENTITIES),ta(l)),a.get(e(i.BFF_CATALOG_RELATED_ENTITIES),na(l)),a.get(e(i.BFF_CATALOG_REVISIONS),ma(l))),a.get(e(i.SHARED_PAGE_DATA),y(l)),a.get(e(i.PAGE_DATA),K(l,n)),a.get(e(i.APP_DATA),U(l)),a.post(e(i.SEARCH),d,w(l)),a.post(e(i.SEARCH_FACETS),d,G(l)),a.post(e(i.AUTHORIZATION),P),a.post(e(i.LOGOUT),T(l)),a.get(e(i.LOGOUT),T(l)),a.get(e(i.OIDC_CALLBACK),r(l)),a.get(e(i.REDOCLY_TOKEN_LOGIN),M(l)),a.get(e(i.REDOCLY_LOGIN_CALLBACK),N()),a.get(e(i.IDP_LOGIN),h(l)),a.post(e(i.SAML_CALLBACK),D(l)),a.get(e(i.INVITE),B(l)),a.get(e(i.HEALTH),Z),a.get(e(i.MCP_OAUTH_PROTECTED_RESOURCE),W()),a.get(e(i.MCP_OAUTH_AUTHORIZATION_SERVER),j()),a.post(e(i.MCP_DYNAMIC_CLIENT_REGISTRATION),J()),a.get(e(i.MCP_AUTHORIZATION),Q()),a.post(e(i.MCP_TOKEN_PORTAL),X()),a.get(e(i.MCP_CALLBACK),_()),a.get(e(`${i.MCP_CALLBACK}/*`),_()),I(a,l),u(a,l),a.post(e(i.FEEDBACK),Y(l)),a.post(e(i.RESOLVE_ROUTE_BY_PATH),o(l)),a.post(e(i.RESOLVE_ROUTES_BY_PATHS),v(l)),a.post(e(i.RESOLVE_ROUTE_BY_SLUG),p(l)),a.post(e(i.ASK_AI),$(l)),a.get(e(i.GET_ROUTES_BY_LINE),E(l)),a.post(e(i.OTEL_TRACES),z),a.get(e(i.REPLAY_OAUTH2_CALLBACK),q),a.all(e("/*"),F(l,n,A)),a.get("*",k),a.onError(da)}function Ta(a){return async(l,t)=>{await a.waitForPluginsLifecycle(),await t()}}function qa(a,l){a.get(e(i.INFO),C()),a.post(e(i.RESOLVE_ROUTE_BY_PATH),o(l)),a.post(e(i.RESOLVE_ROUTE_BY_SLUG),p(l)),a.get(e(i.GET_ROUTES_BY_LINE),E(l))}export{qa as installDevRoutes,$a as installProdRoutes,Ta as waitForPluginsLifecycle};

package/dist/server/web-server/routes/resolve-route.js

@@ -1 +1 @@
-import{Source as m}from"@redocly/openapi-core";import g from"node:fs/promises";import d from"node:path";import{withPathPrefix as S,getPathPrefix as h,combineUrls as E}from"@redocly/theme/core/utils";import{OPENAPI_SHARED_DATA_PREFIX as P}from"../../constants/plugins/openapi-docs.js";import{CATALOG_BASE_SLUG as y,CATALOG_ENTITIES_FILES_REGEX as _,CATALOG_SLUGS as I}from"../../constants/plugins/catalog-entities.js";import{removeTrailingSlash as T}from"../../../utils/url/remove-trailing-slash.js";import{normalizeRouteSlug as U}from"../../../utils/path/normalize-route-slug.js";import{getRoutesByLines as R,getPointerPosition as $}from"../../plugins/openapi-docs/ast-utils.js";import{promiseMapLimit as q,readSharedData as j}from"../../utils/index.js";function W(o){return async t=>{const s=await t.req.json(),r=decodeURI(T(s.split("?")[0])),[e]=r.split("#"),u=h(),a=U(e.slice(u.length)),l=a.startsWith(y)?y:a,n=o.getRouteBySlug(l);if(n&&o.getRouteByFsPath(n.fsPath)?.metadata?.type==="openapi"){const c=await j(`${P}${n.fsPath}`,o.outdir),i=Object.keys(c.routesMapping).find(p=>E(n.baseSlug,c.routesMapping[p])===r);if(!c.sourcePath)return t.json({route:n},200);let f;if(i){const p=d.join(o.contentDir,n.fsPath),b=await g.readFile(p,"utf-8"),L=new m(p,b);f=$(i,L)}return t.json({route:{fsPath:n.fsPath,pointer:i,position:f}},200)}return t.json({route:n},200)}}function z(o){return async t=>{const s=await t.req.json(),r=await q(s,5,async e=>A(e,o));return t.json({routes:r},200)}}function X(o){return async t=>{const s=await t.req.json(),r=await A(s,o);return t.json(r,200)}}function k(o){return async t=>{const s=(t.req.query("lines")||"").split(",").map(a=>parseInt(a)),r=t.req.query("file");if(!r)return t.json("No data",400);const e=await j(`${P}${r}`,o.outdir),u=d.join(o.contentDir,r);try{const a=await g.readFile(u,"utf-8");if(!e)return t.json("No data",400);const l=new m(u,a),n=R(s,l,e.routesMapping,e.baseSlug);return t.json(n,200)}catch{return t.json("No data",400)}}}async function A(o,t){const[s,r]=o.split(":");if(_.test(s))return{route:{slug:`${y}/${I.ALL}`}};let e=t.getRouteByFsPath(s);if(e?.metadata?.type==="openapi"){const l=await j(`${P}${s}`,t.outdir);if(l?.sourcePath){const n=d.join(t.contentDir,e.fsPath),w=await g.readFile(n,"utf-8"),c=new m(n,w),i=R([parseInt(r,10)],c,l.routesMapping,e.baseSlug);if(i.length)return{route:{slug:h()?S(i[0]):i[0],filePath:o}}}}const u=e?.slug?h()?S(e?.slug):e?.slug:"";return{route:{...e,pageName:e?await e?.getNavText?.():"",slug:u,filePath:o}}}export{k as getRoutesByLineHandler,X as resolvePathHandler,z as resolvePathsHandler,W as resolveSlugHandler};
+import{Source as m}from"@redocly/openapi-core";import g from"node:fs/promises";import d from"node:path";import{withPathPrefix as S,getPathPrefix as h,combineUrls as E}from"@redocly/theme/core/utils";import{OPENAPI_SHARED_DATA_PREFIX as P}from"../../constants/plugins/openapi-docs.js";import{CATALOG_BASE_SLUG as y,CATALOG_ENTITIES_FILES_REGEX as _,CATALOG_SLUGS as I}from"../../constants/plugins/catalog-entities.js";import{removeTrailingSlash as T}from"../../../utils/url/remove-trailing-slash.js";import{normalizeRouteSlug as U}from"../../../utils/path/normalize-route-slug.js";import{promiseMapLimit as $}from"../../utils/async/promise-map-limit.js";import{getRoutesByLines as R,getPointerPosition as q}from"../../plugins/openapi-docs/ast-utils.js";import{readSharedData as j}from"../../utils/index.js";function z(o){return async t=>{const s=await t.req.json(),r=decodeURI(T(s.split("?")[0])),[e]=r.split("#"),u=h(),a=U(e.slice(u.length)),l=a.startsWith(y)?y:a,n=o.getRouteBySlug(l);if(n&&o.getRouteByFsPath(n.fsPath)?.metadata?.type==="openapi"){const c=await j(`${P}${n.fsPath}`,o.outdir),i=Object.keys(c.routesMapping).find(p=>E(n.baseSlug,c.routesMapping[p])===r);if(!c.sourcePath)return t.json({route:n},200);let f;if(i){const p=d.join(o.contentDir,n.fsPath),b=await g.readFile(p,"utf-8"),L=new m(p,b);f=q(i,L)}return t.json({route:{fsPath:n.fsPath,pointer:i,position:f}},200)}return t.json({route:n},200)}}function X(o){return async t=>{const s=await t.req.json(),r=await $(s,5,async e=>A(e,o));return t.json({routes:r},200)}}function k(o){return async t=>{const s=await t.req.json(),r=await A(s,o);return t.json(r,200)}}function J(o){return async t=>{const s=(t.req.query("lines")||"").split(",").map(a=>parseInt(a)),r=t.req.query("file");if(!r)return t.json("No data",400);const e=await j(`${P}${r}`,o.outdir),u=d.join(o.contentDir,r);try{const a=await g.readFile(u,"utf-8");if(!e)return t.json("No data",400);const l=new m(u,a),n=R(s,l,e.routesMapping,e.baseSlug);return t.json(n,200)}catch{return t.json("No data",400)}}}async function A(o,t){const[s,r]=o.split(":");if(_.test(s))return{route:{slug:`${y}/${I.ALL}`}};let e=t.getRouteByFsPath(s);if(e?.metadata?.type==="openapi"){const l=await j(`${P}${s}`,t.outdir);if(l?.sourcePath){const n=d.join(t.contentDir,e.fsPath),w=await g.readFile(n,"utf-8"),c=new m(n,w),i=R([parseInt(r,10)],c,l.routesMapping,e.baseSlug);if(i.length)return{route:{slug:h()?S(i[0]):i[0],filePath:o}}}}const u=e?.slug?h()?S(e?.slug):e?.slug:"";return{route:{...e,pageName:e?await e?.getNavText?.():"",slug:u,filePath:o}}}export{J as getRoutesByLineHandler,k as resolvePathHandler,X as resolvePathsHandler,z as resolveSlugHandler};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@redocly/revel-reef",
-  "version": "0.128.0-next.4",
+  "version": "0.128.0-next.5",
   "description": "",
   "type": "module",
   "bin": {
@@ -49,7 +49,7 @@
     "dotenv": "16.4.5",
     "drizzle-orm": "^0.44.2",
     "enquirer": "2.3.6",
-    "esbuild": "0.25.10",
+    "esbuild": "0.27.0",
     "escape-carriage": "^1.3.1",
     "fetch-to-node": "^2.1.0",
     "fflate": "0.7.4",
@@ -92,14 +92,14 @@
     "xml-crypto": "6.0.1",
     "xpath": "0.0.34",
     "yaml-ast-parser": "0.0.43",
-    "@redocly/asyncapi-docs": "1.5.0-next.4",
-    "@redocly/config": "0.39.0",
-    "@redocly/graphql-docs": "1.5.0-next.0",
-    "@redocly/openapi-docs": "3.16.0-next.4",
+    "@redocly/asyncapi-docs": "1.5.0-next.5",
+    "@redocly/config": "0.40.0",
+    "@redocly/graphql-docs": "1.5.0-next.1",
+    "@redocly/openapi-docs": "3.16.0-next.5",
     "@redocly/portal-legacy-ui": "0.11.0-next.0",
-    "@redocly/portal-plugin-mock-server": "0.13.0-next.4",
+    "@redocly/portal-plugin-mock-server": "0.13.0-next.5",
     "@redocly/realm-asyncapi-sdk": "0.6.0-next.0",
-    "@redocly/theme": "0.60.0-next.3"
+    "@redocly/theme": "0.60.0-next.4"
   },
   "peerDependencies": {
     "react": "^19.1.0",